How-to guides

Getting Started

• Quickstart

  Get started with Secret Manager.

• Configuring Secret Manager

  Configure your Google Cloud project to use Secret Manager.

• Accessing the API

  Access the Secret Manager API.

• Creating and accessing secrets

  Create and access secrets with Secret Manager.

• Managing secrets

  Manage secrets with Secret Manager.

• Managing secret versions

  Manage secret versions with Secret Manager.

• Using Secret Manager with other products

  Use Secret Manager with other Google Cloud services.

Concepts

• Conceptual overview

  Learn the main concepts and terms for Secret Manager.

• Best practices

  Learn best practices when using Secret Manager.

• Encryption of secrets

  Understand how Google Cloud encrypts Secret Manager data.

• Resource consistency

  Learn about various levels of resource consistency in Secret Manager.

• Rotation of secrets

  Learn how to set up rotation workflows with Secret Manager.

• Optimistic concurrency control with etags

  Use etags to perform read-modify-write operations safely across API calls when modifying resources in Secret Manager.

Security and Compliance

• Access control with IAM

  Understand Identity and Access Management (IAM) permissions and roles for Secret Manager.

• Audit logging

  Use the audit logs created by Secret Manager.

• Choosing a replication policy

  Choose the replication policy for your secrets.

• Enabling Customer-Managed Encryption Keys (CMEK)

  Use customer-managed encryption on your secrets.

• Data integrity assurance

  Maintain data integrity with checksums.

Management and Automation

• Analyze secrets with Cloud Asset Inventory

  Learn how to leverage Cloud Asset Inventory to perform meaningful analysis on your secrets.

• Creating and managing expiring secrets

  Create and manage secrets that are automatically deleted.

• Enabling event notifications

  Receive notifications via Pub/Sub when Secret Manager resources change.

• Creating and managing rotation policies

  Receive rotation notifications via Pub/Sub when it is time to rotate your secret.

• Filtering lists of secrets and versions

  Use filter to prune the listed secrets or versions.

• Creating and managing annotations

  Use annotations to attach custom metadata to secrets.