A solutions architect needs to ensure that sensitive database credentials used by a Lambda function are not stored in plain text in the environment variables. What is the most secure AWS-native architectural pattern?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Store credentials in AWS Secrets Manager and use the Lambda execution role to retrieve them at runtime

Secrets Manager provides a secure way to store and rotate credentials, with tight integration via IAM roles....

📋Part of AWS Certified Solutions Architect – Associate (SAA-C03) · AWS Certification Practice
Real Exam ScenarioAWS Lambda

A solutions architect needs to ensure that sensitive database credentials used by a Lambda function are not stored in plain text in the environment variables. What is the most secure AWS-native architectural pattern?

✓ Correct Answer & ExplanationAWS Lambda

Correct Answer

Store credentials in AWS Secrets Manager and use the Lambda execution role to retrieve them at runtime

Why This Answer Is Correct

Secrets Manager provides a secure way to store and rotate credentials, with tight integration via IAM roles.

📚 What This Question Tests

This question evaluates your knowledge of AWS Lambda — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding AWS Lambda is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.