lightbulbBook reference: Beyond the books. Original notes kept below; rewrite them in your own words.
3.2.1 Secret Management
Secrets are values that grant access. They live in a vault (AWS SM, GCP SM, Vault), not in source, Slack, or Docker layers.
Why it matters
A leaked .env committed to git is a public admin password. Rotation is impossible if the value is copied in ten places.
How it is used
Inject via environment or a sidecar. Rotate on a schedule and after any suspected leak. Different secrets per environment. Never log them.