StudyToCert

All certifications / Developer Associate / Lessons

AWS Certified Developer – Associate DVA-C02 · Domain 2: Security

Keeping sensitive data out of code and logs: default credential chain, no hardcoded keys, CloudWatch Logs data protection masking

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Many real breaches start with a secret in the wrong place: an access key committed to a public repository, a database password in a container image, or a customer's card number printed in a debug log. The exam checks that you know where sensitive data should and should not go, and which AWS features help.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Developer Associate for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Developer Associate study plan