Exam Vault Associate 002 All QuestionsBrowse all questions from this exam
Question 43

A developer mistakenly committed code that contained AWS S3 credentials into a public repository. You have been tasked with revoking the AWS S3 credential that was in the code. This credential was created using Vault’s AWS secrets engine and the developer received the following output when requesting a credential from Vault.

Which Vault command will revoke the lease and remove the credential from AWS?

    Correct Answer: A

    To revoke the AWS S3 credential created using Vault’s AWS secrets engine, you need to use the `vault lease revoke` command followed by the full lease ID. The lease ID given in the output is 'aws/creds/s3-access/f3e92392-7d9c-09c8-c921-575d62fe80d8'. Therefore, the correct command to revoke the lease is `vault lease revoke aws/creds/s3-access/f3e92392-7d9c-09c8-c921-575d62fe80d8`.

Discussion
daz_rekkaOption: A

A contains the correct syntax and Lease ID.