Core concept
Access via API (gcloud, client libs). Rotation via Cloud Functions + Cloud Scheduler.
Advertisement
How it works
Not built-in rotation like AWS Secrets Manager. Roll your own. Simpler service.
Advertisement
Trade-offs + gotchas
App secrets. API keys. DB passwords. CI/CD credentials.