What Is Secrets Manager (SSM)?
SSM provides users with full lifecycle management services for secrets, including creation, retrieval, updating, and deletion. By integrating resource-level role authorization and comprehensive audit controls, it enables unified management of sensitive secrets. Users or applications can call the SSM API to avoid risks associated with hardcoding sensitive configurations and secrets, effectively preventing sensitive information leaks and business risks due to uncontrolled permission.
Advantages
Enterprise-Level Credential Management
SSM focuses on solving user secrets management issues, effectively preventing plaintext leaks caused by hardcoding in programs, and mitigating business risks associated with uncontrolled permission.
Full-Lifecycle Management
SSM offers full lifecycle management services for secrets, including creation, retrieval, updating, deletion, and access control. By combining resource-level role authorization and comprehensive audit controls, it enables easy and unified management of sensitive secrets.
Security and Reliability
The SSM architecture uses a clustered deployment approach and a distributed database storage system to achieve data storage and disaster recovery. Business users can also create the same secrets across multiple regions to achieve cross-region disaster recovery.
Encrypted Storage
Secrets are stored in encrypted form using Tencent Cloud KMS, which relies on third-party certified Hardware Security Modules (HSM) to generate and protect the encryption keys. When a secret is retrieved, it is securely transmitted to the local server over TLS.