Answer
Store sensitive data outside code.
Tools: Kubernetes Secrets, Vault, AWS Secrets Manager.
Encrypt at rest and in transit.
Tools: Kubernetes Secrets, Vault, AWS Secrets Manager.
Encrypt at rest and in transit.
Quick Answer
Store secrets in a secrets manager - AWS Secrets Manager, HashiCorp Vault, or Kubernetes Secrets (encrypted at rest when configured). Never in environment variables in your Dockerfile or code. Inject at runtime via volume mounts or env vars from the secret store. Rotate secrets regularly. Audit access. Use least-privilege - each service only gets the secrets it needs.
S
SugharaIQ Editorial Team
Verified Answer
This answer has been peer-reviewed by industry experts holding senior engineering roles to ensure technical accuracy and relevance for modern interview standards.
Want to bookmark, take notes, or join discussions?
Sign in to access all features and personalize your learning experience.
Source: SugharaIQ