Secret Management Strategy

Design a secret management strategy step by step.

Current state:
{{current_secret_handling}}

Environments: {{environments}}
Compliance requirements: {{compliance}}

Think through systematically:

1. SECRET INVENTORY: What secrets exist? (API keys, passwords, certs)

2. CURRENT RISKS: Where are secrets exposed? (Code, config, logs)

3. STORAGE: Where should secrets be stored? (Vault, cloud KMS)

4. ACCESS CONTROL: Who needs access to which secrets?

5. INJECTION: How do secrets reach applications?

6. ROTATION: How often should secrets rotate? Automated?

7. AUDIT: How do we track secret access?

8. EMERGENCY ROTATION: How do we rotate compromised secrets?

9. DEVELOPER EXPERIENCE: How do developers access secrets locally?

10. CI/CD: How does the pipeline access secrets?

11. IMPLEMENTATION PLAN: Phased rollout of improved secret management.