Glossary coding Term Page
Secret Store
Managed vault (for example AWS Secrets Manager or Vault) used to inject API keys and passwords without committing them.
Core Idea
A secret store centralizes sensitive values—database passwords, API keys, signing secrets—and exposes them through audited APIs or environment variables. Services such as AWS Secrets Manager, HashiCorp Vault, or platform-specific key stores keep encryption, rotation, and access control consistent.
Why It Matters Here
Mathbong encourages offloading production secrets to a managed store so .env files stay local-only. FastAPI examples fetch credentials from the store before instantiating pydantic-settings, and short tasks run under BackgroundTasks can pull refreshed secrets when needed without leaking them into logs.