AWS Certified Developer Associate DVA-C02 Practice Question

Using a secrets management service to dynamically inject configurations at runtime ensures that the microservice remains environment-agnostic and that sensitive information is not stored within the container image. This approach promotes security and flexibility in configuration management, essential for maintaining best practices in cloud application deployments. Hard-coding settings violates security best practices and reduces flexibility. Instance metadata is meant for obtaining information about the host, not for storing sensitive configuration data. Defining sensitive information as environment variables within the image build process exposes them in the image layers, which is not secure.