The best practices around storing secrets in Prefect are:
1.
Use Credentials and Secret Blocks: Store sensitive information using credentials and secret blocks in Prefect Cloud. These are stored in encrypted format.
2.
Environment Variables: Any sensitive information not stored in a block can be read from the environment, ensuring no direct hardcoding of secrets.
3.
Third-Party Secrets Managers: You can use third-party secrets managers, such as AWS Secrets Manager, for storing and retrieving credentials securely at runtime.
For detailed guidance, refer to the
Prefect Secrets Documentation.