Which of the following statements accurately describe a function of AWS Secrets Manager? [Select Two]

Answer options:

A.Encrypts authentication information in code, ensuring that it is unreadable, that is, not in plain-text.
B.Replaces the need to hardcode authentication credentials in code.
C.Makes it possible to include an API call in code that retrieves authentication information from a central repository.
D.Automatically rotates and updates the code in the application build, ensuring that repositories are kept up to date.
E.Facilitates the embedding of authentication information in code during runtime.

Correct Answer: B, C
AWS Secrets Manager allows users to replace authentication information in code with an API call to Secrets Manager. This API call then retrieves the secret programmatically. This safeguards the secret from being compromised since the secret is removed from the code. AWS Secrets Manager automatically rotates the secret in accordance with specified schedules which allows the implementation of more secure short-term secrets. These, in turn, reduce the risk of authentication information in code being compromised.
https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html
Option A is INCORRECT because AWS Secrets Manager does not encrypt authentication information whilst it is in the code.
Option D is INCORRECT because AWS Secrets Manager does not automatically rotate or update the application code. Rather, it automatically rotates the secret in accordance with specified schedules.
Option E is INCORRECT because AWS Secrets Manager does not facilitate embedding authentication information in code during runtime. Developers do not need to hard-code authentication information in code.