Question

A company mandates that all employees access secrets and parameters by using AWS Systems Manager Parameter Store. Every secret must rotate automatically every 60 days. A DevOps engineer needs to add a new secret that allows an application to access an Amazon ElastiCache (Redis OSS) cluster. Which solution satisfies these requirements with the **LEAST** operational overhead?

Accepted Answer

D. Create the secret in AWS Secrets Manager. Enable rotation by AWS Lambda function. Use the Secrets Manager provided Lambda template for ElastiCache (Redis OSS) secrets. Set the rotation schedule to 60 days. Set a rotation window duration in Secrets Manager. Configure the application to provide the full reserved path to Parameter Store when the application accesses the secret.

Answer

Create the secret in AWS Secrets Manager. Enable managed rotation. Set the rotation frequency to 60 days. Configure the application to reference the secret value by using the fully qualified path in Parameter Store.

Answer

Create the secret in Parameter Store. Enable automatic rotation. Set the rotation frequency to 60 days. Configure the application to reference the secret value by using the fully qualified path in Parameter Store.

Answer

Create the secret in Parameter Store. Create an AWS Lambda function to rotate the secret. Configure an Amazon EventBridge event to invoke the Lambda function every 60 days. Configure the application to provide the unique secret name to Parameter Store to retrieve the secret.