# Secure Config Handling

> The requirement that secrets and sensitive configuration be stored and injected securely, never hardcoded.

Record: `lexicon:secure-config-handling`
Kind: constraint
Layer: [Resource Core](https://banes-lab.com/records/layer/resource-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-secure-config-handling

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Environment-Specific Deployment](https://banes-lab.com/records/lexicon/environment-specific-deployment.md) and before [Deploy Time](https://banes-lab.com/records/lexicon/deploy-time.md).

## Category

- [Portability / Infrastructure / Deployment](https://banes-lab.com/records/lexicon-category/portability-infrastructure-deployment.md)

## Required by

- [Configuration Externalization](https://banes-lab.com/records/architecture/configuration-externalization.md)

## Linked from

- [Portability / Infrastructure / Deployment](https://banes-lab.com/ontology/principles/architecture-category-portability-infrastructure-deployment.md)