Question 1 of 15
For server workloads without a stronger platform-native identity, AppRole is a machine-oriented auth method that avoids treating a pre-issued Vault token as the long-term credential. This approach minimizes the risk of credential compromise and simplifies management, aligning with Vault's design principles. The short-lived tokens reduce the blast radius if a token is ever exposed, and the machine-oriented nature avoids the complexities of managing human-centric credentials in a server environment.
Strong Interview Answer
AppRole is a machine-oriented auth method that avoids treating a pre-issued Vault token as the long-term credential.
What to Listen For
- machine-oriented
- AppRole
- short-lived tokens
- blast radius
Caution
Do not restate the multiple-choice stem or ask the learner merely to name a product, rule, or term.