A developer is automating the deployment of resources in the cloud using a script. To comply with best practices for security, which approach should the developer use to handle credentials required by the script to authenticate with the cloud service provider's API?
Retain the credentials within the script but encrypt them before storing.
Use a password vault to store credentials and access them dynamically when the script runs.
Store the password in environment variables and retrieve it within the script at runtime.
Embed the password in a configuration file that the script can read from during execution.