CCDV-F Security & Safety MEDIUM
PRODUCTION SCENARIO
A CI pipeline authenticates to the Claude API with a personal API key that a senior engineer created. That engineer is leaving the company next month.

What should the team switch to for the pipeline?

Answering here is anonymous. Nothing is saved unless you sign in.

Show answer and explanation

Answer: A service account key or workload identity federation, giving CI an identity of its own

A shared personal key acts as one person and stops working when that person leaves, so an automated workload such as CI should authenticate as a service account with an identity of its own. Personal keys are archived when the user is removed and archived keys are not restored.
Free

Keep practicing CCDV-F

undefined original CCDV-F practice questions, each with an explanation and a source link. No account needed.

Start free practice set → Timed, explained, free