Skip to content
DOP-C02
SDLC Automation
easy
Question 4 of 44

A build engineer needs to store a database password for AWS CodeBuild without exposing it as plain text in environment variables. What does the CodeBuild buildspec documentation recommend?

AStore it directly in the buildspec under env/variables
BStore it in either Parameter Store or Secrets Manager mappings
CCommit it to the source repository and encrypt the repo
DPut it in an Amazon S3 bucket policy

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion