A new benefits portal stores database usernames and passwords for its application tier. Security forbids secrets in environment files or container images. Which credential approach best fits?
Select an answer to reveal the explanation.
Short Explanation
Secrets Manager is the locked drawer that changes the locks on a schedule—the app asks for the current key with its role badge. Parking passwords in .env files or wikis is leaving the drawer open in the hallway.
Full Explanation
Credential management services such as AWS Secrets Manager centralize secrets, support rotation, and allow runtime retrieval using IAM roles so secrets are not baked into env files or images. Plaintext repo files, public wikis, and email distribution violate secrets lifecycle and least-privilege credential handling.