Which Amazon CloudWatch log will provide insight into the password rotation?

A SysOps administrator receives notification that an application that is running on Amazon EC2 instances has failed to authenticate to an Amazon RDS database. To troubleshoot, the SysOps administrator needs to investigate AWS Secrets Manager password rotation

Which Amazon CloudWatch log will provide insight into the password rotation?
A . AWS CloudTrail logs
B . EC2 instance application logs
C . AWS Lambda function logs
D . RDS database logs

View Answer

Answer: C

Explanation:

To investigate AWS Secrets Manager password rotation and troubleshoot the authentication failure of an application running on Amazon EC2 instances, you should check the AWS Lambda function logs responsible for the password rotation.

Understand Secrets Manager Password Rotation:

AWS Secrets Manager can automatically rotate secrets according to a specified rotation schedule using an AWS Lambda function.

Reference: Rotate AWS Secrets Manager secrets

Identify the Lambda Function:

Locate the Lambda function configured for password rotation in the AWS Secrets Manager console.

Reference: Managing Lambda Rotation Function

Access CloudWatch Logs:

Navigate to the CloudWatch console.

Select "Logs" and find the log group associated with the Lambda function responsible for password rotation.

Review the logs for any errors or issues related to the password rotation process.

Reference: Logging AWS Lambda function activity with Amazon CloudWatch Logs

By checking the AWS Lambda function logs, you can gain insights into any issues or errors that occurred during the password rotation process, helping to troubleshoot the authentication failure.