Certified Marketing Cloud Developer

Client IDs and client secrets are sensitive OAuth credentials and must be kept in secure, access-controlled secret storage. A key management system (KMS) is appropriate for this purpose; hard-coding credentials or placing them in URL parameters risks exposure. Salesforce directs developers to store client credentials securely and never expose them on the client side.