Ravi Sir's Cyber Security Cards › Interview Cards
How do you respond if AWS keys were committed to a public repo?
How do you respond if AWS keys were committed to a public repo? Deactivate the keys immediately, rotate secrets, check CloudTrail, scrub git history, move to roles. Deleting the file is not enough; the key stays in git history. “Kill the keys first, check CloudTrail for abuse, then move the app to a
Read card text
What this card says
Short answer
Deactivate the keys immediately, rotate secrets, check CloudTrail, scrub git history, move to roles.
Example
Deleting the file is not enough; the key stays in git history.
Say it in the interview
“Kill the keys first, check CloudTrail for abuse, then move the app to an instance role.”
Why it matters
Leaked keys are used within minutes, so speed matters most.
Learn more in the lesson: 47.6 Cloud and AWS Security MNC Themes