← Other Athentra features
Module: Control · Configuration
Environment Variables and Secrets
Controls draw configuration from tenant-scoped variables, including files and sensitive values. Secrets are stored separately and never returned to the client once set, so they cannot be read back out of the interface. The same control runs across environments by changing its inputs rather than its code.
- 01
Pain Point
What's the problem?
Automation that needs credentials tends to acquire them the worst way: hard-coded into the script.
- 02
Remedy
How do we attack it?
Hold tenant-scoped values and secrets outside the control, and never return them to the client
- 03
Your Value
What do you get out of it?
Keeps credentials out of scripts without making automation harder to write
