AWS Certified Developer Associate DVA-C02 Practice Question

Using AWS Secrets Manager to store database credentials allows for secure management and rotation of secrets without hard-coding them into the Lambda function. When the credentials in Secrets Manager are rotated or updated, the Lambda function can retrieve the updated credentials without needing redeployment. AWS Systems Manager Parameter Store is also used for managing configuration data securely, but it does not provide the same level of secret rotation capabilities as Secrets Manager. Environment variables would require function configuration updates and redeployment if credentials change, which is not ideal. Lastly, embedding the credentials in the Lambda code is a security risk and against best practices for sensitive information management.