Secret Manager / Key Vault

Problem

Your application needs: database password API key certificate Putting them in source code means anyone with repository access may obtain production credentials.

Solution — Secret Store

Secrets live in a dedicated protected system.

Application
    ↓ authenticated request
Secret Store
    ↓
Secret

Access can be controlled, audited and rotated independently of application code.

Core idea: secrets should have their own protected lifecycle rather than living in source code.