hard20 pts · first answer countscloud-fundamentalsiamsecurity

Deploying from GitHub without stored keys

Your GitHub Actions pipeline uses long-lived AWS access keys stored as secrets. What is the more secure pattern?

A.Rotate the stored access keys once every yearB.Use the root user's access keys for deploymentsC.Store the keys in the repository code insteadD.OIDC federation into a role with short-lived credentials

Discussion 0

Join free to post in the discussion.

Deploying from GitHub without stored keys

Discussion 0

Related questions