What is a common mistake with secrets management in Cloud Security?

Putting production connection strings in repository configuration or container images creates long-lived credential exposure. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.