Overview

Service Overview

Secrets Manager is a service that encrypts customers’ sensitive information as Secrets (secure information) and stores and manages it safely. It removes hardcoding of important information in application source code, and allows you to call and retrieve Secrets stored safely in a Key-Value format. Secrets are encrypted with user-managed keys in conjunction with Key Management Service and stored securely.

Service Architecture Diagram

Provided Features

Secrets Manager provides the following features.

• Secret creation/deletion: Secrets Manager can create/delete and manage Secrets. Users store security (sensitive) information in Key/Value form in the created Secret.
• Secret lookup: You can view the Secret value based on custom policies and permissions.
• Label-based version control: You can set a label on the version, which is a snapshot of unique data generated each time a Secret is modified, allowing you to manage Secrets more efficiently.

Components

Secret

It stores the logical unit for sensitive (important) information by encrypting security information values in Key/Value form with a KMS key.

• Secret is an object created through the creation of a Secrets Manager product service in the Samsung Cloud Platform Console.

Version

It is a snapshot of unique data that is newly created each time a Secret is modified (the unit that stores the actual value of the Secret).

Label

It is a name tag or label attached to a specific version of a Secret (a pointer for referencing a specific version).

Constraints

Secrets Manager service constraints are as follows. Before use, be sure to check the constraints below and reflect them in your service usage plan.

Pre-service

Secrets Manager has no prerequisite service.