GCP - Cloud Functions
You want to securely provide a database password to a Google Cloud Run service without hardcoding it. Which approach follows best practices?
You want to securely provide a database password to a Google Cloud Run service without hardcoding it. Which approach follows best practices?
hard📝 Best Practice Q15 of 15
Step-by-Step Solution
Solution:
Step 1: Identify secure secret storage
Google Secret Manager is designed to store sensitive info like passwords securely.Step 2: Use environment variables for app access
Mounting secrets as environment variables in Cloud Run keeps secrets out of code and config files.Step 3: Evaluate other options
Hardcoding, public storage, or sending passwords in URLs expose secrets and are insecure.Final Answer:
Store the password in Secret Manager and mount it as an environment variable in Cloud Run -> Option BQuick Check:
Secret Manager + env vars = secure best practice [OK]
Quick Trick: Use Secret Manager and env vars, never hardcode secrets [OK]
Common Mistakes:
- Hardcoding secrets in config files
- Using public storage for sensitive data
- Exposing secrets in URLs or logs
Master "Cloud Functions" in GCP
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore GCP Quizzes