Google Cloud Professional Cloud DevOps Engineer PCDOE — Topic 1 Question 33

Question

Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM. Cloud Storage provides durable, scalable object storage that is fully managed. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources. Cloud KMS manages encryption keys and integrates with Google Cloud services for encryption.

Google Cloud Professional Cloud DevOps Engineer PCDOE — Question 33