Static .env files do not scale safely. AWS teams need cross-account secrets management, KMS policies, rotation, and leak detection.