What tools have you used for secure storage and management of secrets?

For secure storage and management of secrets, I used the following tools:

• HashiCorp Vault — a centralized secret storage supporting dynamic secrets, rotation, and auditing.
• AWS Secrets Manager — a cloud service for storing and automatically rotating secrets in AWS.
• Kubernetes Secrets — for storing confidential data in a Kubernetes cluster with encryption capabilities.
• Environment variables — a basic method of passing secrets to the application environment, but requires careful access management.

Important practices:

• Minimizing access to secrets based on the principle of least privilege.
• Regular rotation of keys and passwords.
• Encrypting secrets both at rest and in transit.

Example of using HashiCorp Vault:

vault kv put secret/myapp/db password="supersecret"
vault kv get secret/myapp/db