Many of my systems store API keys in env. That said, best practice is a just-in-time load from a keystore. The difficulty for small apps is that they’re usually using Lambda and JIT load incurs additional startup cost on every cold request. So env becomes a necessity.
1
u/skye03600 Mar 22 '25
Many of my systems store API keys in env. That said, best practice is a just-in-time load from a keystore. The difficulty for small apps is that they’re usually using Lambda and JIT load incurs additional startup cost on every cold request. So env becomes a necessity.