A developer is creating a new application that uses AWS Lambda functions to process data. The application needs to interact with an Amazon RDS PostgreSQL database instance. To ensure secure and efficient database connections, the developer wants to leverage a fully managed service that handles connection pooling, multiplexing, and automatic credential rotation. Which AWS service should the developer use?
- AAWS Database Migration Service (DMS)
- BAWS Secrets Manager
- CAmazon ElastiCache for Memcached
- DAmazon RDS Proxy
Show answer & explanationAnswer & explanation
Correct answer: D. Amazon RDS Proxy
Amazon RDS Proxy is a fully managed, highly available database proxy that sits between your application (e.g., Lambda functions) and your RDS database. It handles connection pooling, multiplexing, and automatic credential rotation with AWS Secrets Manager, significantly improving the scalability, resilience, and security of serverless applications connecting to RDS.
Why the other options are wrong
- A. AWS Database Migration Service (DMS) is for migrating databases, not for managing runtime connections for applications.
- B. AWS Secrets Manager securely stores and rotates database credentials, but it doesn't provide connection pooling or multiplexing for the database itself. RDS Proxy integrates with Secrets Manager for credential rotation.
- C. Amazon ElastiCache for Memcached is an in-memory caching service, not a database connection management solution.
Amazon RDS Proxy
Amazon RDS Proxy is a fully managed, highly available database proxy for Amazon RDS that improves application scalability, resilience, and security by pooling and sharing database connections, handling failovers, and integrating with AWS Secrets Manager for credential rotation.
- Connection pooling and multiplexing.
- Reduces database load and improves scalability.
- Enhances resilience during database failovers.
- Integrates with AWS Secrets Manager for secure credential management.
- Supports various RDS engines (MySQL, PostgreSQL, MariaDB, SQL Server).
Memory trick: RDS 'Proxy' 'Pools' 'Private' 'Paths' for 'Performance'.