Best practices for private config data and connection strings in configuration in ASP.NET and Azure
The post recommends keeping passwords and connection strings out of source control, externalizing them into ignored files or environment variables, and using Azure app settings, user secrets, or Key Vault when appropriate.
