Amazon
SAP-C02 · Question #214
During an audit, a security team discovered that a development team was putting IAM user secret access keys in their code and then committing it to an AWS CodeCommit repository. The security team…
The correct answer is D. Configure a CodeCommit trigger to invoke an AWS Lambda function to scan new code. https://docs.aws.amazon.com/lambda/latest/dg/services-codecommit.html
Submitted by haruto_sh· Mar 6, 2026Continuous Improvement for Existing Solutions
Question
During an audit, a security team discovered that a development team was putting IAM user secret access keys in their code and then committing it to an AWS CodeCommit repository. The security team wants to automatically find and remediate instances of this security vulnerability. Which solution will ensure that the credentials are appropriately secured automatically?
Options
- ARun a script nightly using AWS Systems Manager Run Command to search for credentials on the
- BUse a scheduled AWS Lambda function to download and scan the application code from
- CConfigure Amazon Macie to scan for credentials in CodeCommit repositories. If credentials are
- DConfigure a CodeCommit trigger to invoke an AWS Lambda function to scan new code
How the community answered
(35 responses)- A20% (7)
- B6% (2)
- C3% (1)
- D71% (25)
Explanation
https://docs.aws.amazon.com/lambda/latest/dg/services-codecommit.html
Community Discussion
No community discussion yet for this question.