AWS Certified Data Engineer Associate DEA-C01 Practice Question

An analytics company needs a PostgreSQL database to store transformation metadata. Security policy requires engineers to authenticate with temporary AWS IAM credentials instead of managing static passwords. The team also wants to avoid administrative tasks such as patching, backups, and high-availability configuration. Which deployment option best meets these requirements?

Install PostgreSQL on Amazon EC2 instances behind a Network Load Balancer and require clients to use mutual TLS with ACM-issued certificates.
Launch a self-managed PostgreSQL server on Amazon EC2 with an instance profile that allows engineers to assume an IAM role.
Deploy PostgreSQL in Docker containers on Amazon ECS Fargate and store the database password in AWS Secrets Manager for rotation.
Create an Amazon RDS for PostgreSQL instance and enable IAM database authentication.

Report Issue

Answer Description

Amazon RDS is a fully managed service that handles maintenance tasks such as backups, software patching, and multi-AZ failover. RDS for PostgreSQL supports IAM database authentication, allowing users to generate short-lived authentication tokens based on their IAM credentials rather than storing passwords. A self-managed PostgreSQL instance on Amazon EC2 or in containers still leaves the team responsible for operating-system and database maintenance and does not natively integrate with IAM authentication. Using mutual TLS certificates removes passwords but still requires the team to manage the database infrastructure. Therefore, enabling IAM database authentication on Amazon RDS for PostgreSQL is the only option that satisfies both the authentication and operational requirements.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.