مديرو الأسرار والتدوير

في هذا الدرس

keep secrets out of code, images, and Git, and rotate them.

الموضوعات المخطط لها

• Secrets: database passwords, API keys, signing keys, certificates.
• Store them in a secrets manager (Vault, AWS Secrets Manager, Azure Key Vault) with access by workload identity, not shared passwords.
• Apps fetch secrets at start or on refresh; avoid long-lived static credentials; prefer dynamic short-lived credentials.
• Rotate regularly and after any suspicion; design for two valid credentials during rotation.
• Environment variables leak into dumps and logs; mounted files or direct API fetch are safer.