Managing sensitive information securely is a critical challenge in modern infrastructure-as-code (IaC) practices. Terraform, as a widely adopted IaC tool, stores crucial infrastructure details, including secrets, in its state file. If not properly secured, this state file can become a significant security risk. In this talk, we will explore the best practices for safely storing secrets within IaC and securing the Terraform state file itself. I’ll also provide practical tips and hands-on examples