Secret Manager for credentials in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main purpose of Secret Manager in Google Cloud?

Secret Manager securely stores sensitive information like passwords, API keys, and certificates, keeping them safe and easy to manage.

beginner

How does Secret Manager help avoid hardcoding credentials in your application?

It allows your app to fetch secrets at runtime securely, so credentials are not stored directly in code or configuration files.

intermediate

What is a 'secret version' in Secret Manager?

A secret version is a specific copy of the secret data. You can have multiple versions to update or roll back secrets safely.

intermediate

Which Google Cloud IAM role is needed to access secrets in Secret Manager?

The role 'Secret Manager Secret Accessor' allows users or services to read secret data securely.

intermediate

How does Secret Manager ensure your secrets remain secure during access?

It uses encryption at rest and in transit, and access is controlled by IAM policies to restrict who can view or manage secrets.

What is the best way to store API keys securely in Google Cloud?

A Use Secret Manager to store and access API keys

B Hardcode API keys in application source code

C Store API keys in a public Cloud Storage bucket

D Email API keys to team members

Secret Manager is designed to securely store sensitive data like API keys, avoiding insecure practices like hardcoding or public storage.

What does a secret version allow you to do?

A Automatically delete secrets after use

B Store secrets in different Google Cloud projects

C Share secrets publicly

D Keep multiple copies of a secret for updates and rollback

Secret versions let you manage changes safely by keeping multiple copies of secret data.

Which IAM role lets a service read secrets from Secret Manager?

A Network Admin

B Secret Manager Secret Accessor

C Compute Admin

D Storage Object Viewer

The 'Secret Manager Secret Accessor' role grants permission to read secret data.

How does Secret Manager protect secrets during storage?

A Requires manual encryption by users

B Stores secrets in plain text

C Encrypts secrets at rest and in transit

D Only encrypts secrets when accessed

Secret Manager automatically encrypts secrets both when stored and when sent over the network.

Why should you avoid hardcoding credentials in your app?

A It risks exposing secrets if code is shared or leaked

B It makes the app run slower

C It increases cloud costs

D It prevents the app from connecting to the internet

Hardcoding credentials risks accidental exposure, making Secret Manager a safer alternative.

Explain how Secret Manager helps keep your application credentials safe and easy to manage.

Think about how you would keep your house keys safe but accessible only to trusted people.

Describe the role of IAM in controlling access to secrets stored in Secret Manager.

Imagine giving different keys to different family members for different rooms.