Is local secret store best practice for sensitive data?

I am using Azure App Configuration on a team project and am wondering what would be the best way to store the connection string, so that it is protected, yet not every developer would have to install it to his local secret store?

For production I am thinking of storing it in an env variable which the application will be getting (it's an Azure Web App).

What would be the best practice to store the conn string for development and is storing it in an env var in prod good practice?