DVA-C02 Question 123

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  B) Eliminated - In Option B, the password is generated but not stored securely in any service (like Secrets Manager), which means you'd lose access to it after creation. This makes it problematic for future access to the database.

• Chose D2

  A) Eliminated - This approach requires writing and maintaining custom Lambda code, which adds development effort. B) Eliminated - This requires some setup in CodeBuild and manual handling of parameters, which adds complexity. C) Eliminated - Same as option A (Reason) D) Correct - Secrets Manager handles password generation and rotation automatically. This approach uses native CloudFormation functionality with no custom code.

• 1

  D) Resources: MyDBPassword: Type: AWS::SecretsManager::Secret Properties: Name: MyDBPasswordSecret GenerateSecretString: PasswordLength: 16 ExcludeCharacters: '"@/' RequireEachIncludedType: true IncludeSpace: false