A database specialist has configured IAM authentication on an Amazon RDS for MySQL database instance. A user is trying to connect to the database. What does the user need to do in order to authenticate and access the database?

Answer options:

A.Generate an authentication token using aws rds generate-db-auth-token CLI command.
B.Generate an authentication token using AWS STS service.
C.Configure AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY environment variables in their local environment.
D.Configure their database user id and password in their local environment.

Answer: A
Option A is CORRECT because the user must use an authentication token to access Amazon RDS database instances when IAM authentication is configured. To generate a temporary authentication token, aws rds generate-db-auth-token CLI command can be used.
Option B is incorrect because AWS STS is used to generate temporary authentication tokens to provide users access to AWS services and resources. It is not used when accessing AWS RDS databases.
Option C is incorrect because access key id and secret access key are not used when accessing Amazon RDS database instances.
Option D is incorrect because users do not have traditional database credentials when accessing the AWS RDS database using IAM authentication. Instead, a user must generate a temporary authentication token.
Reference:
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.Connecting.AWSCLI.html