Airflow Workers and Secrets Backends: Runtime Connection Authorization and Expired Credential Boundaries
In an Apache Airflow 2.x deployment, tasks executing on workers retrieve connection credentials from a secrets backend such as AWS Secrets Manager, Google Cloud Secret Manager, HashiCorp Vault, or environment variables. The goal is to enforce least-privilege access at the runtime boundary and handle expired credentials predictably before task dispatch. Web U