SDK auth best practices for service-to-service calls?

[Evanildo]

For SDK-based integrations, what auth pattern do you recommend between internal services?

I want something simple for dev, but secure enough for production migration.

Token rotation strategy suggestions are very welcome.