AWS Certified Data Engineer Associate DEA-C01 Practice Question

An analytics company needs a PostgreSQL database to store transformation metadata. Security policy requires engineers to authenticate with temporary AWS IAM credentials instead of managing static passwords. The team also wants to avoid administrative tasks such as patching, backups, and high-availability configuration. Which deployment option best meets these requirements?

Deploy PostgreSQL in Docker containers on Amazon ECS Fargate and store the database password in AWS Secrets Manager for rotation.
Launch a self-managed PostgreSQL server on Amazon EC2 with an instance profile that allows engineers to assume an IAM role.
Install PostgreSQL on Amazon EC2 instances behind a Network Load Balancer and require clients to use mutual TLS with ACM-issued certificates.
Create an Amazon RDS for PostgreSQL instance and enable IAM database authentication.

Report Issue

Answer Description

Amazon RDS is a fully managed service that handles maintenance tasks such as backups, software patching, and multi-AZ failover. RDS for PostgreSQL supports IAM database authentication, allowing users to generate short-lived authentication tokens based on their IAM credentials rather than storing passwords. A self-managed PostgreSQL instance on Amazon EC2 or in containers still leaves the team responsible for operating-system and database maintenance and does not natively integrate with IAM authentication. Using mutual TLS certificates removes passwords but still requires the team to manage the database infrastructure. Therefore, enabling IAM database authentication on Amazon RDS for PostgreSQL is the only option that satisfies both the authentication and operational requirements.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.