What is a common mistake with secrets management in Cloud Security?

Putting production connection strings in repository configuration or container images creates long-lived credential exposure.