Identity and credentials
Prefer OAuth or dedicated scoped credentials. Store secrets only in approved configuration, rotate them deliberately and remove access when an integration is retired.
- OAuth where supported
- Dedicated identity
- Minimum scopes
- Secret rotation
- Revocation