2.7.3.5 Secure Secret Management

• Environment Variables

• Use AWS Secrets Manager or Parameter Store for DB passwords, JWT secrets, third-party API tokens.

• Encrypt or otherwise avoid storing secrets in code repositories (Git).

• Rotation

• Periodic rotation of keys (JWT_SECRET, DB credentials).

• Automated scripts or AWS Lambda tasks to update ECS tasks with new secrets seamlessly.