When you use a remote backend that needs authentication, HashiCorp recommends that you:

Write the authentication credentials in the Terraform configuration files

Keep the Terraform configuration files in a secret store

Push your Terraform configuration to an encrypted git repository

Use partial configuration to load the authentication credentials outside of the Terraform code