thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Foundational

Secrets Management

Securely storing, distributing, rotating, and auditing credentials such as passwords, API keys, and certificates.

Definition

Dedicated stores include HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. Pipelines and apps fetch secrets at runtime with short-lived identities rather than hard-coding them.

Example

A GitHub Actions job authenticates via OIDC to Azure and reads a database password from Key Vault.

Exam tip

Never store secrets in source code or plain environment files; prefer a vault with rotation and dynamic secrets.

Related terms