Noos
PT EN
RAN-DBDEA-00259
Ranvier · DBDEA

Exam DBDEA Topics: cicd Difficulty: medium

An Automation Bundle deploys a Lakeflow Job whose Python task must call an external API with a bearer token. Security policy forbids the token from appearing in any versioned file or in the deployed job's visible configuration. The bundle files live in Git. How should the task get the token?

Options (Reading Mode) Click to filter discussion →
  1. A. Declare a bundle variable for the token and pass its value with --var each time the pipeline deploys
  2. B. Point a task environment variable at a secret scope with a reference like {{secrets/scope/key}}, resolved at run time
  3. C. Commit a placeholder string in the YAML and have the CI pipeline rewrite the file with sed right before the deploy step runs
  4. D. Keep the token directly in the YAML, since the team's Git repository is private to the platform group
Reveal answer

Correct answer: Point a task environment variable at a secret scope with a reference like {{secrets/scope/key}}, resolved at run time

Reference: https://docs.databricks.com/aws/en/dev-tools/bundles/

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (B): Point a task environment variable at a secret scope with a reference like {{secrets/scope/key}}, resolved at run time

⚓ Official Documentation Anchor: https://docs.databricks.com/aws/en/dev-tools/bundles/
Ranvier · DBDEA

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.