How can you securely store and retrieve secrets in Amazon EKS without hardcoding them in your application code or Dockerfile?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Use the AWS Secrets Manager CSI driver to mount secrets as volumes in EKS pods

The CSI driver for Secrets Manager allows pods to access secrets securely, leveraging IAM identities for permission management....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon SageMaker

How can you securely store and retrieve secrets in Amazon EKS without hardcoding them in your application code or Dockerfile?

✓ Correct Answer & ExplanationAmazon SageMaker

Correct Answer

Use the AWS Secrets Manager CSI driver to mount secrets as volumes in EKS pods

Why This Answer Is Correct

The CSI driver for Secrets Manager allows pods to access secrets securely, leveraging IAM identities for permission management.

📚 What This Question Tests

This question evaluates your knowledge of Amazon SageMaker — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon SageMaker is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.