Security — Advanced
How do we handle secrets in agent workflows?
Never embed secrets in prompts. Store in a secrets manager (Vault, AWS Secrets Manager); tools retrieve at invocation time using their own credentials. Log secret access but never the secret value. If a tool must pass through a secret to a downstream service, do it out-of-band from the LLM context.
More on Security — Advanced
Browse the full FAQ for 164 answers, or start a free GenAI maturity assessment to see where your organisation stands.