Web Security · Senior · Question 63 of 75
What is the main benefit of a secrets manager over environment variables in a repo?
- 1Secrets become publicly readable
- 2Secrets no longer need to be rotated
- ✓Correct answer: Central access control, audit logs and rotation without code changes
Explanation
Short-lived, automatically rotated credentials limit the value of any leak. Audit logs show who read what.