Tell us how you managed and ensured the security of confidential data or secrets in your projects.

The following practices are used to manage and ensure the security of confidential data and secrets in projects:

• Using secret managers — for example, HashiCorp Vault, AWS Secrets Manager, Azure Key Vault. They allow centralized storage and control of access to secrets.

• Storing secrets outside of code — do not store passwords, API keys, and other secrets in source code or repositories.

• Data encryption — both at rest and in transit (for example, TLS for transmission, AES for storage).

• Access restriction — principle of least privilege, using roles and access policies.

• Secret rotation — regular changing of passwords and keys.

• Logging and access auditing — tracking the use of secrets.

An example of using environment variables to store secrets in Python:

import os

db_password = os.getenv('DB_PASSWORD')
# Use db_password to connect to the database

Thus, secrets are not stored in code but are transmitted through secure channels or environment configuration.