# Cloud Identity & Secrets (DevOps) > IRSA (AWS), Workload Identity (GCP), Managed Identity (Azure), External Secrets Operator, pola Vault - 22 pertanyaan wawancara - Mid-Level - [Pertanyaan Wawancara: DevOps](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara.md) ## 1. Apa keuntungan utama menggunakan IRSA (IAM Roles for Service Accounts) di cluster EKS dibandingkan kunci akses AWS statis? **Jawaban** IRSA memungkinkan pod Kubernetes mengambil role IAM sementara melalui OIDC, menghilangkan kebutuhan menyimpan credential statis dalam Secret. Izin dibatasi per ServiceAccount, mengikuti prinsip least privilege. Credential dirotasi secara otomatis oleh AWS STS (Security Token Service), mengurangi attack surface jika pod dikompromikan. ## 2. Di GCP, bagaimana Workload Identity Federation memungkinkan pod GKE mengakses sumber daya Google Cloud? **Jawaban** Workload Identity mengikat ServiceAccount Kubernetes ke Google Service Account melalui anotasi. Pod memperoleh token OIDC dari API server Kubernetes, yang ditukar dengan token GCP melalui metadata server. Ini menghindari penyimpanan kunci JSON service account statis di cluster, mengikuti model zero-trust dan memungkinkan rotasi credential otomatis. ## 3. Apa perbedaan utama antara Azure Managed Identity dan service principal tradisional? **Jawaban** Managed Identity menghilangkan kebutuhan mengelola credential secara manual (client secret, sertifikat). Azure secara otomatis menangani siklus hidup credential, termasuk rotasi. Managed Identity dapat berupa system-assigned (terikat siklus hidup sumber daya) atau user-assigned (independen). Ini mengurangi risiko kebocoran secret dibandingkan service principal di mana secret harus disimpan dan dirotasi secara manual. ## 19 pertanyaan lagi tersedia - Bagaimana External Secrets Operator menyinkronkan secret dari provider eksternal (AWS Secrets Manager, Vault) ke Kubernetes? - Apa peran mutating admission webhook controller dalam injeksi secret otomatis melalui Vault Agent Injector? Daftar gratis: https://sharpskill.dev/id/login ## Topik wawancara DevOps lainnya - [Kontrol Versi & Git](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/version-control-git.md): 20 pertanyaan, Junior - [Dasar-dasar Linux](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/linux-fundamentals.md): 22 pertanyaan, Junior - [Shell Scripting & Bash](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/shell-scripting-bash.md): 20 pertanyaan, Mid-Level - [Dasar-Dasar Networking](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/networking-basics.md): 22 pertanyaan, Junior - [Dasar-Dasar Docker](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/docker-fundamentals.md): 24 pertanyaan, Junior - [Dasar-Dasar CI/CD](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/ci-cd-fundamentals.md): 18 pertanyaan, Junior - [GitHub Actions](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/github-actions.md): 22 pertanyaan, Mid-Level - [GitLab CI/CD](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/gitlab-ci.md): 22 pertanyaan, Mid-Level - [Jenkins](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/jenkins.md): 22 pertanyaan, Mid-Level - [Dasar-dasar Kubernetes](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/kubernetes-basics.md): 26 pertanyaan, Mid-Level - [Networking Kubernetes](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/kubernetes-networking.md): 24 pertanyaan, Mid-Level - [Kubernetes Lanjutan](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/kubernetes-advanced.md): 24 pertanyaan, Mid-Level - [Ingress & API Gateway](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/ingress-api-gateway.md): 20 pertanyaan, Mid-Level - [Dasar-dasar Terraform](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/terraform-basics.md): 22 pertanyaan, Mid-Level - [Terraform Lanjutan](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/terraform-advanced.md): 22 pertanyaan, Mid-Level - [Ansible & Configuration Management](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/ansible-configuration.md): 20 pertanyaan, Mid-Level - [Dasar-Dasar AWS](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/aws-essentials.md): 26 pertanyaan, Mid-Level - [Dasar-Dasar Azure](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/azure-fundamentals.md): 22 pertanyaan, Mid-Level - [Dasar-Dasar GCP](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/gcp-fundamentals.md): 22 pertanyaan, Mid-Level - [Monitoring & Prometheus](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/monitoring-prometheus.md): 22 pertanyaan, Mid-Level - [Logging & ELK Stack](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/logging-elk.md): 20 pertanyaan, Mid-Level - [Alerting & Incident Response](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/alerting-incident-response.md): 20 pertanyaan, Mid-Level - [Keamanan Pipeline CI/CD](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/cicd-pipeline-security.md): 20 pertanyaan, Mid-Level - [Helm & Kubernetes](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/helm-kubernetes.md): 20 pertanyaan, Mid-Level - [Keamanan Runtime & Cluster](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/runtime-cluster-security.md): 24 pertanyaan, Senior - [Container Supply Chain Security](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/container-supply-chain.md): 22 pertanyaan, Senior - [Service Mesh & Istio](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/service-mesh-istio.md): 24 pertanyaan, Senior - [GitOps & ArgoCD](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/gitops-argocd.md): 22 pertanyaan, Senior - [Progressive Delivery](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/progressive-delivery.md): 20 pertanyaan, Senior - [Observability Terdistribusi](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/observability-distributed.md): 22 pertanyaan, Senior - [Disaster Recovery & Backup](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/disaster-recovery.md): 20 pertanyaan, Senior - [Optimasi Performa](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/performance-optimization.md): 22 pertanyaan, Senior - [Optimasi Biaya Cloud](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/infrastructure-cost.md): 20 pertanyaan, Senior - [Prinsip SRE](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/sre-principles.md): 24 pertanyaan, Senior - [Chaos Engineering](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/chaos-engineering.md): 20 pertanyaan, Senior - [Platform Engineering](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/platform-engineering.md): 22 pertanyaan, Senior --- Source: SharpSkill (https://sharpskill.dev), tech interview preparation for your real stack. HTML version of this page: https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/cloud-identity-secrets