You are asked to recommend a solution to store and retrieve sensitive configuration data from an application that runs on Compute Engine. Which option should you recommend?
Answer is (D).
Secret Manager is a secure and convenient storage system for API keys, passwords, certificates, and other sensitive data. Secret Manager provides a central place and single source of truth to manage, access, and audit secrets across Google Cloud.
https://cloud.google.com/secret-manager
Explanation:
Secret Manager is the recommended solution for storing and retrieving sensitive configuration data in Google Cloud. It is purpose-built for managing sensitive information like API keys, passwords, and other secrets securely, with robust access control and encryption.
"D"
There's ambiguity in the question in terms of what type of configuration data we're talking about and how large. Even though the compute metadata server can hold sensitive values like ssh keys, there are limitations with respect to how much data you can put in there (reference A below). Secret manager also has a size limit on how much you can store. (reference B below). However, secret manager is explicitly said to be a good use case for Sensitive Configuration information (reference C below) which makes it the preferred answer.
References:
A- https://cloud.google.com/compute/docs/metadata/setting-custom-metadata#limitations
B- https://cloud.google.com/secret-manager/quotas
C- https://cloud.google.com/secret-manager/docs/overview#secret_manager
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Tabayashi
Highly Voted 3 years agocloudprincipal
Highly Voted 2 years, 11 months agocloudprincipal
2 years, 11 months agobadrik
2 years, 10 months agoBPzen
Most Recent 5 months agotia_gll
1 year, 1 month agodija123
1 year, 1 month ago[Removed]
1 year, 9 months agoAzureDP900
2 years, 5 months agoAwesomeGCP
2 years, 6 months ago