A company wants to automate the creation of secure test databases with random credentials to be stored safely for later use. The credentials should have sufficient information about each test database to initiate a connection and perform automated credential rotations. The credentials should not be logged or stored anywhere in an unencrypted form. Which steps should a Database Specialist take to meet these requirements using an AWS CloudFormation template?
A. Create the database with the MasterUserName and MasterUserPassword properties set to the default value
B. Then, create the secret with the user name and password set to the same default value
C. Add a Secret Target Attachment resource with the SecretId and TargetId properties set to the Amazon Resource Names (ARNs) of the secret and the databas
D. Finally, update the secret’s password value with a randomly generated string set by the GenerateSecretString property
E. Add a Mapping property from the database Amazon Resource Name (ARN) to the secret AR
F. Then, create the secret with a chosen user name and a randomly generated password set by the GenerateSecretString propert G