CCDV-F: Claude Certified Developer — Foundations

By Anthropic · Question Mode

QuestionQ2

VerifiedSecurity and Safety

Your Claude application’s API keys are kept in a secrets manager. The team is considering whether to use the same key in development, staging, and production. How should the keys be handled across environments?

Explanation

Each environment should use its own API key. Environment-specific credentials isolate compromise, revocation, auditing, permissions, and rotation, so exposure in development or staging does not grant access to production. Anthropic documentation also recommends creating a dedicated API key for direct API use and storing it securely.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!