Where should a production database password live?
A) In a .env file committed to the git repo.
B) Hard-coded in the Dockerfile.
C) In a managed secret store (AWS Secrets Manager, HashiCorp Vault,
GCP Secret Manager) with encryption at rest, IAM access, audit
logs, and rotation.
D) Printed in CloudWatch logs.Sign in to save your code and track progress across devices.
