Secrets Manager

• 1: Overview
• 2: How-to guides
• 3: Release Note

1 - Overview

Service Overview

Secrets Manager is a service that encrypts customers’ sensitive information as Secrets (secure information) and stores and manages it safely. It removes hardcoding of important information in application source code, and allows you to call and retrieve Secrets stored safely in a Key-Value format. Secrets are encrypted with user-managed keys in conjunction with Key Management Service and stored securely.

Service Architecture Diagram

Provided Features

Secrets Manager provides the following features.

• Secret creation/deletion: Secrets Manager can create/delete and manage Secrets. Users store security (sensitive) information in Key/Value form in the created Secret.
• Secret lookup: You can view the Secret value based on custom policies and permissions.
• Label-based version control: You can set a label on the version, which is a snapshot of unique data generated each time a Secret is modified, allowing you to manage Secrets more efficiently.

Components

Secret

It stores the logical unit for sensitive (important) information by encrypting security information values in Key/Value form with a KMS key.

• Secret is an object created through the creation of a Secrets Manager product service in the Samsung Cloud Platform Console.

Version

It is a snapshot of unique data that is newly created each time a Secret is modified (the unit that stores the actual value of the Secret).

Label

It is a name tag or label attached to a specific version of a Secret (a pointer for referencing a specific version).

Constraints

Secrets Manager service constraints are as follows. Before use, be sure to check the constraints below and reflect them in your service usage plan.

Pre-service

Secrets Manager has no prerequisite service.

2 - How-to guides

The user can enter the required information for the Secrets Manager service through the Samsung Cloud Platform Console, select detailed options, and create the service.

Secrets Manager Create

You can create and use Secrets Manager from the Samsung Cloud Platform Console.

To create a Secrets Manager, follow the steps below.

1. Click the All Services > Security > Secrets Manager menu. Go to the Service Home page of Secrets Manager.

2. Click the Secrets Manager Create button on the Service Home page. You will be taken to the Secrets Manager Create page.

3. Secrets Manager creation 페이지에서 서비스 생성에 필요한 정보들을 입력하고 추가 정보를 입력하세요.

   • Enter service information area, input or select the required information.

     Category	Required	Detailed description
     Secret name	Required	Enter Secret name
     Type	Required	Select the type you want to manage encrypted with Secret from the list
     Key/Value input	Required	Enter a pair of Secret information’s Key/Value + Click to add up to 10 X Click to delete the entry
     Encryption Key	Required	Select the KMS key to use when encrypting the Secret from the list Choose a key created in the KMS service from the list. Or click +Create New to create a KMS key Only KMS keys for encryption/decryption can be selected. The selectable encryption/decryption KMS key types are encryption/decryption (AES-256), encryption/decryption and signing/verification (RSA-2048), encryption/decryption (ARIA) – three types When entering Key/Value, input must be within 64 KB; registration is not allowed if the size exceeds this limit For detailed information on creating a KMS key, refer to Create KMS Key
     Allowed Access IP	Required	Enter allowed access IP After entering the IP address, click the Add button to register up to 10 Click the Delete All button to remove all IP entries from the list You can register the 0.0.0.0/24 - 0.0.0.0/32 range, but it may be vulnerable to security
     Description	Option	Enter additional information for Secret

     Table. Secrets Manager service information input items
   • Additional Information Input area, enter or select the required information.

     Category	Required	Detailed description
     Tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key, Value values

     Table. Secrets Manager Additional Information Input Items

4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.

   • When creation is complete, check the created resource on the Secrets Manager List page.

Secrets Manager View Detailed Information

Secrets Manager can view and edit the full list of resources and detailed information. Secrets Manager Details page consists of Detail Information, Version, Tag, Operation History tabs.

To view the detailed information of Secrets Manager, follow these steps.

1. All Services > Security > Secrets Manager 메뉴를 클릭하세요. Secrets Manager의 Service Home 페이지로 이동합니다.
2. Click the Secrets Manager menu on the Service Home page. Navigate to the Secrets Manager List page.
3. Click the resource to view detailed information on the Secrets Manager List page. You will be taken to the Secrets Manager Details page.
   • Secrets Manager Details At the top of the page, status information and descriptions of additional features are displayed.

     Category	Detailed description
     Status	Displays the status of Secrets Manager Active: Available/Active To be Terminated: Scheduled for deletion
     Service termination	Button to cancel the service

     Table. Secrets Manager status information and additional features

Detailed Information

On the Secrets Manager List page, you can view the detailed information of the selected resource and, if necessary, edit the information.

Version

On the Secrets Manager List page, you can use labels to track the version of a selected secret.

Tag

Secrets Manager List page allows you to view the tag information of the selected resource, and you can add, modify, or delete it.

Work History

You can view the operation history of the selected resource on the Secrets Manager list page.

Secrets Manager Cancel

You can cancel the unused Secrets Manager.

To cancel Secrets Manager, follow the steps below.

1. All Services > Security > Secrets Manager 메뉴를 클릭하세요. Secrets Manager의 Service Home 페이지로 이동합니다.
2. Click the Secrets Manager menu on the Service Home page. Go to the Secrets Manager List page.
3. Click the resource to view detailed information on the Secrets Manager list page. It navigates to the Secrets Manager details page.
4. Click the Cancel Service button on the Secrets Manager Details page. You will be taken to the Cancel Service popup.
5. Service termination in the popup window, enter the cancellation waiting period and click the Confirm button.
   • The termination waiting period can be entered within the range of 7 - 30 days.
6. After termination is complete, check on the Secrets Manager List page whether the resource has been terminated.

3 - Release Note

Secrets Manager