April 23, 2023 - Reliability and Operations

Manage secrets without putting them in deployment logs

A deployment log should explain what happened without becoming a second store of credentials. Review the entire secret path, distinguish audit metadata from secret values, and prepare a response for accidental disclosure.