Use Secrets Management Solutions

Info

ID: MS-M7020
MITRE mitigation: -

Store sensitive credentials, API keys, and connection strings in dedicated secrets management services rather than in code repositories, configuration files, or environment variables. Retrieve secrets dynamically at runtime using identity-based access controls.

Techniques Addressed by Mitigation

ID	Name	Use
MS-TA7007	Using deployment credentials	Store deployment credentials in dedicated secret managers rather than in code repositories or CI/CD configuration files.
MS-TA7019	Cloud credentials in runtime environment	Store secrets in dedicated secret managers and retrieve them dynamically at runtime using identity-based access.