Secrets Management
Storing API keys, credentials, and certificates in a dedicated vault, outside source code, with rotation and audited access.
Secrets management is the discipline of keeping credentials out of source code, config files, and logs — instead fetching them at runtime from a dedicated secrets store that supports rotation, fine-grained access control, and an audit trail of who accessed what, when. A secret committed to a git repository is effectively compromised the moment it’s pushed, which is precisely the failure this discipline exists to prevent.