A citizen-portal Function needs a database password at run time. Where should that secret live?
Select an answer to reveal the explanation.
Short Explanation
Passwords are not souvenirs for the repo or the image. Vault holds them; the app fetches the current value when it runs.
Full Explanation
OCI Vault is where passwords, tokens, certificates, and related master keys belong for cloud-native apps. The application retrieves current secret contents at run time. Baking credentials into source, Dockerfile ENV, or Function configuration treated as “hidden” fails least-privilege and rotation hygiene.