What should a solutions architect do to satisfy the security requirements?
Enable IAM database authentication on the database.
Provide self-signed certificates. Use the certificates in all connections to the RDS instance.
Take a snapshot of the RDS instance. Restore the snapshot to a new instance with encryption enabled.
Download AWS-provided root certificates. Provide the certificates in all connections to the RDS instance.
Explanations:
IAM database authentication is used for authentication purposes, not for encryption in transit. This option does not address the requirement of encrypting data in transit.
Providing self-signed certificates for encryption is not recommended for production environments because it lacks trust and scalability. AWS provides managed certificates for this purpose.
Taking a snapshot and restoring it with encryption enabled is only related to encryption at rest, not encryption in transit. It does not solve the requirement for encrypting data in transit.
Downloading AWS-provided root certificates and using them in all connections ensures that the connection to the RDS instance is encrypted in transit using SSL/TLS, which meets the security requirements.
My best guess is:
Download AWS-provided root certificates. Provide the certificates in all connections to the RDS instance.
From what I’ve heard, the answer is:
Download AWS-provided root certificates. Provide the certificates in all connections to the RDS instance.