DATA-ENGINEER-ASSOCIATE practice

Q4 Single choice

A healthcare company stores patient records in an on-premises MySQL database. The company creates an application to access the MySQL database. The company must enforce security protocols to protect the patient records. The company currently rotates database credentials every 30 days to minimize the risk of unauthorized access.

The company wants a solution that does require the company to modify the application code for each credential rotation.

Which solution will meet this requirement with the LEAST operational overhead?

A
Assign an IAM role access permissions to the database. Configure the application to obtain temporary credentials through the IAM role.
B
Use AWS Key Management Service (AWS KMS) to generate encryption keys. Configure automatic key rotation. Store the encrypted credentials in an Amazon DynamoDB table.
C
Use AWS Secrets Manager to automatically rotate credentials. Allow the application to retrieve the credentials by using API calls.
D
Store credentials in an encrypted Amazon S3 bucket. Rotate the credentials every month by using an S3 Lifecycle policy. Use bucket policies to control access.