Google Cloud Professional Cloud Developer PCD — Topic 1 Question 230

Question

Your application is running as a container in a Google Kubernetes Engine cluster. You need to add a secret to your application using a secure approach. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Store the credential in Secret Manager. Create a Google service account (GSA) to read the credential from Secret Manager. Create a Kubernetes service account (KSA) to run the container. Use Workload Identity to config... Workload Identity Federation lets workloads access Google Cloud without long-lived service account keys. A service account provides an identity for workloads to access Google Cloud APIs securely. Secret Manager stores and controls access to secrets such as API keys and credentials.

Google Cloud Professional Cloud Developer PCD — Question 230