How do you manage secrets and encryption keys in cloud architectures?

Use managed secret stores and key management services. Best practices: - Rotate secrets regularly - Use envelope encryption with KMS - Restrict access by role and environment - Audit usage Avoid storing secrets in code, images, or plaintext env files. Prefer short-lived credentials whenever possible.