The database administrator is looking for options to store credentials for a database configured in the Amazon EC2 instance. To meet security guidelines, credentials need to be rotated regularly. These instances are already integrated with the AWS Parameter store for storing configuration files. Team Lead is looking for a consistent way to call secrets from the existing configuration scripts.
What can be done to achieve this requirement?

Answer options:

A.Create a secret in AWS Parameter Store & Create a Use reference path
aws/reference/parameterstore/secrets_id from Parameter Store.
B.Create a secret in AWS Secrets Manager & Create a Use reference path
aws/reference/parameterstore/ secrets_id from Parameter Store.
C.Create a secret in AWS Parameter Store & Create a Use reference path aws/reference/secretsmanager/ secrets_id from Parameter Store.
D.Create a secret in AWS Secrets Manager & Use reference path /aws/reference/secretsmanager/ secrets_id from Parameter store.

Correct Answer: D
Since the Rotation of credentials is required, AWS Secrets manager is an option to store these credentials. Secrets stored in Amazon Secrets Manager can be referenced from the Parameter Store using path as /aws/reference/secretsmanager/secret_Id_in_Secret_manager.
Options A & C are incorrect. Since secret key rotation is required, you need to create a secret in AWS Secrets Manager & not in the Parameter store.
Option B is incorrect as the reference path is incorrect.
For more information on AWS Systems Manager Parameter Store, refer to the following URL,
https://docs.aws.amazon.com/systems-manager/latest/userguide/integration-ps-secretsmanager.html
https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_create-basic-secret.html