Overview
Service Overview
Secrets Manager is a service that encrypts customers’ sensitive information as Secret(secure information) and safely stores and manages it. Remove hardcoding of sensitive information in application source code and retrieve it by calling Secrets stored securely in a Key-Value format. Secret is encrypted with a user‑managed key in conjunction with the Key Management Service and stored securely.
Service architecture diagram
Provided Features
Secrets Manager provides the following features.
- Secret creation/deletion: Secrets Manager can create, delete, and manage Secrets. * The user stores security (sensitive) information in Key/Value form in the generated Secret.
- Secret lookup: You can retrieve the Secret value based on custom policies and permissions.
- Label-based version management: You can set a label on the version, which is a snapshot of the uniquely generated data each time a Secret is modified, enabling more efficient Secret management.
Components
Secret
It stores sensitive (important) information as a logical unit, encrypting security information values in a Key/Value format using a KMS key.
- A Secret is an object generated by creating a Secrets Manager service in the Samsung Cloud Platform Console.
Version
A snapshot of unique data that is newly created each time a Secret is modified (the unit that stores the Secret’s actual value).
Label
It is a label or tag attached to a specific version of a Secret (a pointer for referencing a specific version).
Constraints
The constraints of the Secrets Manager service are as follows. Before use, be sure to check the following constraints and incorporate them into your service usage plan.
- Secrets Manager is a regional service, and a created Secret can only be used within that region.
- When a customer-managed key is rotated, its version is updated internally. * By using a newly generated version of the key, you can decrypt data that was encrypted with the previous version of the key. * (maintain compatibility)
- Versions through key rotation are compatible up to the 100th version regardless of the encryption algorithm.
| Item | Detailed description | Quota |
|---|---|---|
| Secret Value Size | Size of the encrypted Secret value | 65,536 |
| Secrets | Number of Secrets per region in an Account | 500,000 |
| Attached Labels for Secret | Number of Labels attached to all versions of the Secret | 20 |
| Versions per Secret | Secret version count | 100 |
Prerequisite Service
Secrets Manager has no prerequisite services.