API
Create and rotate an API key
One key per environment, and the safe rotation order.
One key per environment
Create separate keys per environment and workload from the console keys page. If one key leaks or misbehaves, you revoke that key alone without touching the rest of your traffic.
Rotate without downtime
Create the replacement key first, deploy it everywhere the old key was used, then revoke the old one. Revoking before deploying is the only way rotation causes an outage.