CCAR-P: Claude Certified Architect — Professional

API keys are credentials and must not be committed to version-controlled configuration files, where repository access and history can expose them. They should be supplied securely at runtime, such as through a secret store or protected environment-based mechanism. Anthropic documents using a key helper that retrieves a key from a Vault secret for dynamic credentials.