Who Can Read the Production Secrets?
An audit asks one question: which ServiceAccounts can read the Secrets in tracking? The only one that should is payments-api, the payments app's own account in tracking, which may read its one Secret stripe-key.
This is a Pro problem
Pro unlocks every lab and quiz, all roadmaps and a full daily plan.
Unlock with Pro