Configuration

Configuration is part of the governance boundary.

Rules

• Keep credentials outside source control.
• Keep provider configuration separate from policy configuration.
• Version important governance configuration.
• Prefer reproducible environments.

Secrets

Use local environment configuration or your deployment platform secret manager.

Never commit real credentials.