Find a password and an API key hard-coded in a project, scan for leaks, move them out of the code into the environment, and then into AWS Secrets Manager with versions and rotation. This interactive lesson needs JavaScript.