Explore best practices for managing secrets in cloud environments with this informative conference talk from BSidesSF 2018. Delve into the concept of secrets in application development, examining various storage options including code, environment variables, and purpose-built solutions. Learn to identify common pitfalls in secret management and understand the crucial role of identity in accessing sensitive data. Evaluate criteria for selecting an effective secret management solution, with a focus on container-specific approaches for AWS, GCP, and Azure. Gain expert insights on improving your organization's secret management practices, weighing security and usability trade-offs, and addressing unresolved security risks in cloud-based applications.