thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Secret Manager (Google Cloud)

Google Cloud service for storing, versioning and accessing secrets such as API keys and passwords with IAM control and audit logging.

Definition

Secret Manager stores secrets as versioned objects with automatic or user-managed replication, CMEK support, rotation schedules that send Pub/Sub notifications, and integration with Cloud Run, GKE and Cloud Build. Access is granted through roles such as Secret Manager Secret Accessor.

Example

A Cloud Run service mounts the latest version of a database password from Secret Manager as an environment variable.

Exam tip

Store secrets in Secret Manager, not in code, environment files or metadata; grant secretAccessor per secret.

Related terms