City IAM design must separate humans who rotate Vault secrets from Functions that only fetch current contents. Which split is appropriate?
Select an answer to reveal the explanation.
Short Explanation
One team restocks the safe; another only peeks at the current combination. Manage for people who rotate; read bundles for workloads that fetch.
Full Explanation
Secret-management practice separates principals that create and rotate secrets (manage secret-family) from dynamic groups or workloads that only retrieve contents (read secret-bundles). A deployer who can rewrite a secret is a different risk than a Function that can fetch current contents.