When the Secret Manager API is enabled, you can use the following tools to help integrate Secret Manager into your applications and processes.
- The Cloud SDK, which provides a command-line interface for managing secrets from clients.
- Convenient, idiomatic client libraries, which allow you to use secrets in applications written in Go, Python, Java, and other languages, without using the Secret Manager API directly.
Enabling API access
Before you begin using Secret Manager, you must enable API access.
Sign in to your Google Account.
If you don't already have one, sign up for a new account.
In the Cloud Console, on the project selector page, select or create a Cloud project.
Make sure that billing is enabled for your Google Cloud project. Learn how to confirm billing is enabled for your project.
- Enable the required API.
- Install and initialize the Cloud SDK.
After enabling API access, additional configuration may be required, outside of Secret Manager.
- To access Secret Manager resources from a Compute Engine instance, you must grant
the instance the
https://www.googleapis.com/auth/cloud-platformOAuth scope. For more information, refer to the Compute Engine documentation.
- To access Secret Manager resources from App Engine, you must grant the App Engine service the required roles. You can also authenticate as an end user. To learn more, see the App Engine documentation.
- To learn about authenticating to Google Cloud in different environments, refer to the Authentication overview.