How should PowerShell automation handle credentials and secrets?
Documentation: Microsoft Learn
Use the organization's approved secret store or workload identity, request the narrowest scope, keep secrets out of source and logs, and rotate secrets on a schedule.
Interview · Question 15 of 34
Answer before reveal
Your draft
Write the answer you would give in an interview. The model answer stays hidden until you have drafted at least a short response.
A strong answer
Use the organization's approved secret store or workload identity, request the narrowest scope, keep secrets out of source and logs, and rotate secrets on a schedule. SecureString alone is not a complete secret-management design.
Show it concretely
1PS> Get-Secret -Name ServiceCredential
Expect this follow-up
What changes when the automation runs non-interactively in Azure or a CI system?
