What is Secrets management, secret rotation?

Secrets management keeps credentials — passwords, API keys, private keys, database passwords — in a vault that issues them to authenticated programs under leases and logs every access, never in code or configuration files. Secret rotation replaces a secret on a schedule and on any suspicion, so that a leaked secret is valid only until its next rotation: its cryptoperiod, in NIST’s terms.