Secret Manager is a secure and convenient storage system for API keys, passwords, certificates, and other sensitive data.
The first six secret versions are free. New customers get $300 in free credits to spend on Secret Manager.
功能
Easily follow the principle of least privilege with Secret Manager's Cloud IAM roles. You can grant individual permissions to secrets and separate the ability to manage secrets from the ability to access their data.
Secret Manager enables simple life cycle management with first class versioning and the ability to pin requests to the latest version of a secret. You can use Cloud Functions to automate rotation.
With Cloud Audit Logs integration, every interaction with Secret Manager generates an audit log. This integration makes meeting audit and compliance requirements easy.
Secret names are project-global resources, but secret data is stored in regions. You can choose specific regions in which to store your secrets, or you can let us decide. Either way, we automatically handle the replication of secret data.
Secret data is immutable and most operations take place on secret versions. With Secret Manager, you can pin a secret to specific versions like "42" or floating aliases like "latest."
Control access to secrets the same way you control access to other Google Cloud resources. Only project owners have permission to access Secret Manager secrets; other roles must explicitly be granted permissions through Cloud IAM.
With Cloud Audit Logs enabled, every interaction with Secret Manager generates an audit entry. You can ingest these logs into anomaly detection systems to spot abnormal access patterns and alert on possible security breaches.
Data is encrypted in transit with TLS and at rest with AES-256-bit encryption keys.
Enable context-aware access to Secret Manager from hybrid environments with VPC Service Controls.
Secret Manager's API-first design makes it easy to extend and integrate into existing systems. It is also integrated into popular third-party technologies like HashiCorp Terraform and GitHub Actions.
運作方式
Secret Manager lets you store, manage, and access secrets as binary blobs or text strings. Secret Manager works well for storing configuration information such as database passwords, API keys, or TLS certificates needed by an application at runtime.
常見用途
定價
How Secret Manager pricing works | When you use Secret Manager, you are charged for operations and active secret versions. | |
---|---|---|
Service | Description | Price |
Get started free | New users get $300 in free trial credits to use within 90 days. | Free |
All customers get six secret versions for analyzing and storing sensitive data. | Free | |
Secret versions | Active | $0.06 per version per location |
Destroyed | Free | |
Operations | Access operations | $0.03 per 10,000 operations |
Management operations | Free | |
Notifications | Rotation notifications | $0.05 per rotation Secret Manager bills for every SECRET_ROTATE message sent to a Pub/Sub topic. |
Learn more about Secret Manager pricing
How Secret Manager pricing works
When you use Secret Manager, you are charged for operations and active secret versions.
All customers get six secret versions for analyzing and storing sensitive data.
Free
Secret versions
Active
$0.06 per version per location
Destroyed
Free
Operations
Access operations
$0.03 per 10,000 operations
Management operations
Free
Notifications
Rotation notifications
$0.05 per rotation
Secret Manager bills for every SECRET_ROTATE message sent to a Pub/Sub topic.
Learn more about Secret Manager pricing