CyberGuard dictionary / Cloud Security
Secret Management
Secret management is the controlled storage, distribution, use, and rotation of credentials and other sensitive application values.
In simple terms
Passwords, API keys, and tokens should not be copied into source code or shared broadly. Applications need a way to obtain only the secrets they require.
Technical explanation
Controls include encryption, identity-based access, audit records, rotation, and limiting exposure in logs or environment dumps. A secret store is useful only if its own access policy is narrow.
Secrets should be stored, delivered, rotated, and revoked through controlled processes rather than embedded in code or images. Access logs and short lifetimes reduce the cost of disclosure.
Examples in practice
A payment service reads its database credential from a managed secret store using its service identity instead of embedding the password in a container image.
A database password is removed from a repository and stored in a managed secret service. After rotation, the team verifies that the old value no longer works and reviews who accessed it.
Why it matters
Good secret handling reduces both accidental disclosure and the reach of a compromised workload.
VERIFY & LEARN MORE
Sources and further reading
Published 2026-10-15 · Last updated 2026-10-15 · CyberGuard editorial content. Source links provide context; they do not imply endorsement.