| ID | product.platform.secrets_manager.secret_store |
|---|---|
| Description | Stores service secrets with KMS encryption. |
| Key | secret_store |
| Type | component:database |
| Team | Platform Engineering |
| Owner | platform@iotgateway.example |
| Status | active |
| Technologies | HashiCorp Vault, PostgreSQL |
| Attributes | cipher: AES-256-GCM, rotation: 90d |
| Tags |
Table of contents
Guide
Secret Store
The Secret Store is the durable, encrypted home for every secret the Secrets Manager issues or holds. It keeps each secret versioned, tracks who has leased it, and enforces which paths a caller may read via policies.
Storage profile
HashiCorp Vault fronts the secret engine; PostgreSQL is the durable backing store. Values are encrypted at rest with AES-256-GCM and never written to logs. Secrets rotate every 90d.