Which Azure service is recommended for securely storing and managing secrets used in a CI/CD pipeline?

Azure Key Vault is the recommended service for securely storing and managing secrets like API keys, connection strings, and certificates. It provides a centralized, cloud-based solution with hardware security module (HSM)-backed protection, access policies, and auditing capabilities, making it ideal for CI/CD pipelines to retrieve secrets at runtime without hardcoding them. Azure DevTest Labs is for creating environments for development and testing. Azure App Configuration is for managing application settings and feature flags, not primarily secrets. Azure Repos is a version control service for source code.