A cloud security engineer configures a secret manager to automatically rotate database credentials every 30 days. Which additional control ensures applications are not disrupted during rotation?
-
A
Disable rotation and use manual key updates
-
B
Implement a rotation lambda that updates both the secret and the database simultaneously
-
C
Store credentials in environment variables as a fallback
-
D
Use the same password for all rotation cycles