Why it matters

Secret Manager solves secret storage. Standard for GCP.

Advertisement

The architecture

Secrets: versioned + encrypted.

Access via IAM.

Secret ManagerSecretversioned + encryptedIAM accessprincipals + rolesRotationmanual or automatedAutomatic rotation via Cloud Functions triggers
Secret handling.
Advertisement

How it works end to end

Versioning: multiple versions per secret; access by version or 'latest'.

Rotation: manual or automated via triggers.

Audit: Cloud Audit Logs.

Regional or replicated storage.