Identity & Access
API Key
Also: access key, secret key
A secret string that identifies and authorizes a program calling a service.
In more detail
API keys are easy to use and easy to leak: they end up in code, environment files, logs, screenshots and chat. Anyone holding the key can use it. Store keys in a secret manager, scan for them, set spend limits and rotate them on a schedule and after any suspected exposure.