Google Secret Manager

Secret Manager is a secure and convenient storage system for API keys, passwords, certificates, and other sensitive data.

Key Features

• Encryption: Secrets are encrypted at rest and in transit.
• Versioning: Manage multiple versions of a secret.
• IAM Integration: Control access using standard IAM roles.

Use Cases

• App Secrets: Store database passwords and API keys.
• Certificates: Store private keys and certificates.

Key Concepts

• Secret: The logical container (e.g., "db-password").
• Secret Version: The actual value (e.g., "P@ssw0rd1").
• Replication: Automatic (global) or User-managed (specific regions).