Secret Manager quickstart

Available in VPC

Secret Manager in NAVER Cloud Platform makes it easy to create, use, and manage secrets. While you can explore the service in detail with Getting Started with Secret Manager and Using Secret Manager, we recommend starting with this quickstart overview to understand the complete workflow. Here's the entire process for using Secret Manager:

1. Set user permissions
2. Create a secret
3. Manage secrets
4. Rotate secrets
5. Call APIs
6. Delete a secret

The workflow for using Secret Manager closely follows the secret lifecycle. For details about the secret lifecycle and related terms, see Secret Manager concepts and Secret Manager glossary.

1. Set user permissions

To control access to secrets, grant permissions to sub accounts created in Sub Account on NAVER Cloud Platform. First, create sub accounts in addition to your main account through Sub Account.

To assign administrators and users, grant Secret Manager administrator permissions (NCP_SECRETMANAGER_MANAGER) or user permissions (NCP_SECRETMANAGER_USER) to sub accounts created in Sub Account. See Secret Manager permissions management and the Sub Account user guide.

2. Create a secret

Create the secret you want to use. For detailed instructions on creating a secret, see:

• Create a secret in Using Secret Manager

3. Manage secrets

View and manage the list of secrets you have created. You can view and change the status of a secret throughout its lifecycle. You can view secret usage history through Cloud Log Analytics. For detailed instructions, see:

• Manage secret status in Using Secret Manager
• View usage logs in Using Secret Manager
• Search Cloud Log Analytics

4. Rotate secrets

Password rotation runs in your environment because it requires direct access to the connected system using the password. To rotate a password, define an action in Cloud Functions. For detailed instructions, see:

• Secret rotation
• Cloud Functions - Getting Started with VPC

5. Call APIs

Use the REST APIs provided by Secret Manager to manage and retrieve secrets. For detailed instructions, see:

• Secret Manager API guide

6. Delete a secret

To prevent misuse and maintain security, request deletion of secrets you no longer use. Secrets are automatically deleted after a 7-day grace period following the deletion request. You can also delete a secret immediately if no grace period is needed.

For detailed instructions, see:

• Delete a secret in Using Secret Manager