All 15 Cloud & DevOps questions
More in Cloud & DevOps
What is the purpose of a .dockerignore file when preparing a Node.js project for cloud deployment? What is a twelve-factor app, and how does it guide how a Node.js application should be configured for cloud deployment? What is infrastructure as code (IaC), and how might a Node.js team use a tool like Terraform or the AWS CDK alongside their application code? What is a load balancer, and how does it distribute traffic across multiple Node.js application instances? What is a reverse proxy, and why is Nginx commonly placed in front of a Node.js application in production? What is a feature flag, and how would you implement one in a Node.js application to control a new feature's rollout? What is a container registry, and how does it fit into the deployment pipeline for a containerized Node.js application? What is a health check endpoint, and how does an orchestrator like Kubernetes use liveness and readiness probes differently? What is a CI/CD pipeline for a Node.js application, and what stages does a typical one include? What is horizontal scaling for a Node.js application, and what specific architectural requirement does it impose?
Advertisement
Back to results for “Environment Variables & Configuration”
Node.js › Cloud & DevOps

What role do secret managers (like AWS Secrets Manager) play in deploying a Node.js app across dev, staging, and production?

Intermediate

Answer

Sensitive values (API keys, database passwords) should ideally come from a dedicated secrets manager rather than plain environment variables or files, since secrets managers provide encryption at rest, access control, and audit logging that plain environment variables typically don't.
const client = new SecretsManagerClient({ region: 'us-east-1' });
const secret = await client.send(new GetSecretValueCommand({ SecretId: 'prod/database' }));
const { password } = JSON.parse(secret.SecretString);
Real-world example A team migrates database credentials from a plain .env file to AWS Secrets Manager, gaining automatic credential rotation and a full audit trail of secret access.

Common follow-ups: What's the specific security risk of environment variables versus a dedicated secrets manager?;How do you handle secret rotation without requiring a full redeploy?

Environment Variables & Configuration;Security
All 15 Cloud & DevOps questions