Secret Manager glossary

Prev Next

Available in VPC

These are the descriptions of the glossary required to use or understand Secret Manager.

Secret Manager admin

The sub account that has the permissions to execute all functions of Secret Manager (the sub account that has the NCP_SECRETMANAGER_MANAGER policy)

Secret Manager user

The sub account that has the permission to execute only the View function of Secret Manager (the sub account that has the NCP_SECRETMANAGER_USER policy)

Secret Manager basic key

The protection key that is assigned to each user and managed automatically by NAVER Cloud Platform

Security password

A type of credential that refers to knowledge-based authentication methods such as passwords, passphrases, keys, and Personal Identification Numbers (PINs)

Protection key

The key that encrypts the secret value

Seal

To encrypt the data encryption key (DEK) with the key encryption key (KEK), which is the higher-level key

Envelope encryption

A method to store the encrypted data along with the seal key

User managed key

The key that the user creates and manages in Key Management Service in person

Secret

A resource that includes the security password addressed in Secret Manager

Secret value

A group of fields corresponding to the security password within the secret

Secret store

A repository that saves secret values by encrypting them

Secret status

The status of the resource managed in Secret Manager

Secret chain

The list of secret values, which keep secret values that are rotated while using secrets in the order of rotation

Secret stage

Information that describes the status of secret values in the secret chain

Secret rotation

The process of rotating a security password in the remote system that actually uses the security password and updating it to Secret Manager

Credential

Any ID, password, certificate, or user biometric information used for authentication