Overview
KakaoCloud Secrets Manager separates sensitive information, such as API keys and database credentials, from source code and lets you create, store, and manage it centrally. Instead of hardcoding secrets in source code, applications can retrieve them dynamically through the Secrets Manager API. This reduces the security risks associated with code exposure and centralizes secret management.
- To use Secrets Manager for the first time, click [Start service] on the service page.
- To start the service, you need the Secrets Manager Manager role or higher.
Purpose and use cases
Secrets Manager is used to securely store and dynamically provide all types of secret information required by applications. It enables centralized management of database access information, external service API keys, OAuth tokens, and more.
Features
Centralized management
Secrets such as database passwords and API keys used across multiple applications can be centrally managed in one place. This eliminates security gaps and operational complexity that may arise when managing secrets in a distributed environment.
Fine-grained access control
Granular access permissions can be set based on Identity and Access Management (IAM) policies. This allows you to apply the principle of least privilege effectively by granting only secret view or management permissions to specific users or applications.
Audit and compliance support
All activities related to who accessed or modified a secret and when are logged and tracked in the Cloud Trail service. In addition, a new version is created whenever a secret is updated, allowing you to easily trace and restore to a specific point in time if issues occur.
Getting started
For instructions on using Secrets Manager, see How-to Guides. If you are new to KakaoCloud, start with Getting started.