# SEC02-BP03: Store and use secrets securely

## Description

Secret management (Vault, AWS Secrets Manager).

## Implementation Guidance

- Centralized secret storage
- Encrypted at rest
- Access logging
- Automatic rotation
- No secrets in code

## Risk Level

Critical - Leaked secrets lead to compromise.
