Secrets & Machine Identity
Secrets and machine identities must minimize lifetime and exposure surfaces.
Management Principles
- Zero Hardcoded Secrets: Static credentials never exist in source code or configuration files.
- Short-Lived Identities: Long-lived API keys replaced with temporary tokens via OIDC federation.
- Automated Rotation: Secrets rotated periodically with verified emergency revocation workflows.