# Secret Store Over Hardcoded Secrets

> Replace an inline secret with a resolved read from a secret store that fails fast when the secret is absent.

Record: `algo:no-hardcoded-secrets`
Kind: Architectural Rules
Canonical: https://banes-lab.com/ontology/algorithms#algo-no-hardcoded-secrets
Closure: https://banes-lab.com/json/records/algo/no-hardcoded-secrets/closure

## principle

- [Secrets Management](https://banes-lab.com/records/arch/secrets-management.md)

## composes

- [Security Core](https://banes-lab.com/records/algo/security-core.md)