Home › AWS DevOps Pro › cloudcomputing › dopsdlc › Which AWS service stores build-and-deploy-time s…
Which AWS service stores build-and-deploy-time secrets (DB passwords, API keys) with rotation + IAM access policies, referenced from CI/CD pipelines without checking secrets into source?
AAWS Secrets Manager (or Systems Manager Parameter Store SecureString)
BS3 bucket with public-read ACL
CAmazon CloudFront
DHardcoded env vars in the source repo
Answer & Solution
Correct answer: A. AWS Secrets Manager (or Systems Manager Parameter Store SecureString)
Secrets Manager + SSM Parameter Store are the canonical secret stores for pipelines (per DOP-C02 §1.1). The other options leak secrets.
Related questions
Which DOP-C02 deployment strategy replaces a fleet of EC2 instances by spinning up new insAn architect needs to roll out a Lambda function update across many regions with progressiWhich AWS service helps automate the build of container images from a Dockerfile in a CI pAn architect must run unit tests, integration tests, and security scans automatically whenWhich DOP-C02 deployment pattern stands up a parallel green environment, smoke-tests it, tWhich CodeDeploy deployment configuration shifts a small fixed percentage of traffic to a Which AWS service builds and maintains hardened, golden Amazon Machine Images (AMIs) and cWhich AWS service is a managed artifact repository for application packages (npm, Maven, N