Avoid credentials in environment variables

from blog Forkcasting, | ↗ original
In the Twelve Factor App, section III. Config, Wiggins writes that config should be stored in environment variables, including "Credentials to external services such as Amazon S3 or Twitter". However, this neglects one important aspect of service-to-service credentials: rotation. Credentials are one of the few configuration values that need to be...