ExamGecko
Question list
Search
Search

Question 131 - Terraform Associate 003 discussion

Report
Export

Which option cannot be used to keep secrets out of Terraform configuration files?

A.
A Terraform provider
Answers
A.
A Terraform provider
B.
Environment variables
Answers
B.
Environment variables
C.
A -var flag
Answers
C.
A -var flag
D.
secure string
Answers
D.
secure string
Suggested answer: D

Explanation:

A secure string is not a valid option to keep secrets out of Terraform configuration files. A secure string is a feature of AWS Systems Manager Parameter Store that allows you to store sensitive data encrypted with a KMS key. However, Terraform does not support secure strings natively and requires a custom data source to retrieve them. The other options are valid ways to keep secrets out of Terraform configuration files. A Terraform provider can expose secrets as data sources that can be referenced in the configuration. Environment variables can be used to set values for input variables that contain secrets. A -var flag can be used to pass values for input variables that contain secrets from the command line or a file.Reference= [AWS Systems Manager Parameter Store], [Terraform AWS Provider Issue #55], [Terraform Providers], [Terraform Input Variables]

asked 18/09/2024
Liam Derwin
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first