StudyToCert

All certifications / Associate Cloud Engineer / Lessons

Google Cloud Associate Cloud Engineer Associate Cloud Engineer · Domain 4: Configuring access and security

Secret Manager for passwords, API keys and certificates

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Applications need secrets: database passwords, third-party API keys, TLS private keys and tokens. Putting them in source code, container images, plain environment variables in deployment files or configuration buckets is risky, because anyone who can read those places can read the secret, and it's hard to rotate them. Secret Manager is Google Cloud's managed service for storing secrets securely.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Associate Cloud Engineer for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Associate Cloud Engineer study plan