Secret Manager for storing sensitive data
When we write our code, there is a lot of sensitive data that we use and should never be stored in a repository, such as credentials, API keys, certificates, or database passwords. Even if leaving this data out of our code is a good practice, where can we store it, access it, and easily update it when required without compromising security? This is where Secret Manager comes to the rescue.
Secret Manager is a managed service that allows us to store any kind of configuration information or sensitive data, stored either as text strings or binary blobs, and retrieve it any time we need it.
Each piece of sensitive data is stored as part of what is called a secret, which also contains additional metadata. Versioning is enabled for the contents of each secret, so we can always recover an old password if it’s needed, or just get the latest version to ensure that we are always up to date. When we add a new version, the secret is said to...
