AWS Secrets Manager

Secrets Manager stores sensitive information—API keys, database credentials, certificates—and rotates them automatically. Applications retrieve secrets at runtime instead of baking them into config files. Automatic rotation changes credentials on a schedule without application changes. Audit logs show who accessed what. Encryption at rest and in transit is handled automatically. Production applications that take security seriously use Secrets Manager to keep credentials out of code and configuration files.