Security — Advanced

How do we handle secrets in agent workflows?

Never embed secrets in prompts. Store in a secrets manager (Vault, AWS Secrets Manager); tools retrieve at invocation time using their own credentials. Log secret access but never the secret value. If a tool must pass through a secret to a downstream service, do it out-of-band from the LLM context.

More on Security — Advanced

Browse the full FAQ for 164 answers, or start a free GenAI maturity assessment to see where your organisation stands.