Access Management - Record
API key
The secret code an application uses to identify itself when connecting to an another system
What's it for?
Lets one piece of software prove it is allowed to use another service.
For example…
A reporting tool stores an API key in a vault and includes it when pulling weather data from a vendor
A weather dashboard includes its API key when requesting forecast data; if the key leaks, someone else could use its allowance
Think of it like…
Numbered stamp for a club's letterbox: it shows which member sent the letter, not the full story of who they are