Developers building a new microservice for licensing renewals proposed baking long-term IAM access keys into the container image. What credential hygiene should the architecture require instead?
Select an answer to reveal the explanation.
Short Explanation
The container should wear a role badge it can pick up at runtime—not carry a permanent metal master key glued inside the image. Long-term keys in layers get copied, leaked, and never forgotten.
Full Explanation
New solutions should use temporary credentials via assumed IAM roles for compute runtimes rather than embedding long-term access keys in images. Multi-year key retention in images, shared IAM user keys, and logging secrets violate credential hygiene and least privilege.