Extract passwords from settings.py file

I would like to extract any sensi开发者_高级运维tive information from my settings.py file, for example, db name/password, amazon key/password, api keys/passwords. What is the suggested way to go about doing this.

Move all the keys, passwords, etc. to a file secrets.py, then add import secrets to settings.py.