A city application stores Amazon RDS credentials that must change every 30 days without manual ticket chaos. Which design implements that credential security control?
Select an answer to reveal the explanation.
Short Explanation
Passwords that never change are welcome mats. Secrets Manager rotation flips the RDS password on a timer and keeps apps reading the secret—no monthly AMI rebuild theater. Emailing Mondays or committing secrets to git is how leaks start.
Full Explanation
AWS Secrets Manager supports automated rotation of database credentials, updating the secret and the RDS user password on a defined schedule such as every 30 days. Hard-coding credentials in AMIs, email-based rotation, or storing passwords in source control do not provide controlled automated credential hygiene.