A developer pastes a municipal cloud access key into a public Git repository. What should the team treat as the primary incident?
Select an answer to reveal the explanation.
Short Explanation
A secret in a public repo is already out in the wild—rotate it now, assume someone else saw it, and check what that key touched. Don't start with VLAN or NAT distractions.
Full Explanation
Public exposure of long-lived cloud access keys is a leaked-credentials security incident. Immediate steps include rotating or disabling the key, reviewing audit logs for abuse, and preventing further secret commits. Deployment strategy, NAT sizing, and VLAN tagging are separate operational topics.