Which solution will meet these requirements?
Use Amazon Aurora PostgreSQL for the database. Store the database credentials in AWS Systems Manager Parameter Store. Turn on rotation.
Use Amazon Aurora PostgreSQL for the database. Store the database credentials in AWS Secrets Manager. Turn on rotation.
Use Amazon DynamoDB for the database. Store the database credentials in AWS Systems Manager Parameter Store. Turn on rotation.
Use Amazon DynamoDB for the database. Store the database credentials in AWS Secrets Manager. Turn on rotation.
Explanations:
While using Amazon Aurora PostgreSQL is suitable, AWS Systems Manager Parameter Store does not natively support automatic credential rotation, which does not meet the requirement for regular rotation without programming overhead.
Amazon Aurora PostgreSQL supports credential management with AWS Secrets Manager, which allows for secure storage and automatic rotation of database credentials without requiring additional programming. This aligns perfectly with the company’s requirements.
Although Amazon DynamoDB can be used as a database, it does not align with the company’s desire to migrate from PostgreSQL. Additionally, using AWS Systems Manager Parameter Store for credential storage does not offer automatic rotation, failing to meet the specified requirement.
Similar to option C, using Amazon DynamoDB does not fulfill the requirement of migrating from a PostgreSQL database. Although AWS Secrets Manager can handle automatic credential rotation, the choice of database does not align with the company’s needs.
From my point of view, the answer is:
Use Amazon Aurora PostgreSQL for the database. Store the database credentials in AWS Secrets Manager. Turn on rotation.