nerdexam
Amazon

SAP-C02 · Question #214

During an audit, a security team discovered that a development team was putting IAM user secret access keys in their code and then committing it to an AWS CodeCommit repository. The security team…

The correct answer is D. Configure a CodeCommit trigger to invoke an AWS Lambda function to scan new code. https://docs.aws.amazon.com/lambda/latest/dg/services-codecommit.html

Submitted by haruto_sh· Mar 6, 2026Continuous Improvement for Existing Solutions

Question

During an audit, a security team discovered that a development team was putting IAM user secret access keys in their code and then committing it to an AWS CodeCommit repository. The security team wants to automatically find and remediate instances of this security vulnerability. Which solution will ensure that the credentials are appropriately secured automatically?

Options

  • ARun a script nightly using AWS Systems Manager Run Command to search for credentials on the
  • BUse a scheduled AWS Lambda function to download and scan the application code from
  • CConfigure Amazon Macie to scan for credentials in CodeCommit repositories. If credentials are
  • DConfigure a CodeCommit trigger to invoke an AWS Lambda function to scan new code

How the community answered

(35 responses)
  • A
    20% (7)
  • B
    6% (2)
  • C
    3% (1)
  • D
    71% (25)

Explanation

https://docs.aws.amazon.com/lambda/latest/dg/services-codecommit.html

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice