Secrets

secrets stores encrypted application secrets for your Cloud account. Create a secret once; retrieve plaintext only when your workload is authorized.

Status: Preview — CreateSecret, GetSecretValue, PutSecretValue, ListSecrets, DescribeSecret, and DeleteSecret (recovery window or force delete) via gateway SigV4.

Concepts

Term	Meaning
Secret	Named sealed value in your account
SecretString / SecretBinary	Payload type; get returns one of these
Version	Immutable revision; current stage is AWSCURRENT
Recovery window	Soft-delete period before permanent removal

Access

Hostname	secrets.eu-central-1.cloud.skippr.io
Protocol	Secrets Manager JSON (X-Amz-Target: secretsmanager.*)
Auth	SigV4 / Cloud JWT via gateway
Region	eu-central-1

Quickstart

aws secretsmanager create-secret \
  --name app/db \
  --secret-string '{"user":"app","password":"…"}' \
  --endpoint-url https://secrets.eu-central-1.cloud.skippr.io

aws secretsmanager get-secret-value \
  --secret-id app/db \
  --endpoint-url https://secrets.eu-central-1.cloud.skippr.io

aws secretsmanager put-secret-value \
  --secret-id app/db \
  --secret-string '{"user":"app","password":"rotated"}' \
  --endpoint-url https://secrets.eu-central-1.cloud.skippr.io

aws secretsmanager describe-secret \
  --secret-id app/db \
  --endpoint-url https://secrets.eu-central-1.cloud.skippr.io

Operations

Operation	Notes
CreateSecret	Name + SecretString or SecretBinary
GetSecretValue	Returns SecretString or SecretBinary
PutSecretValue	New version; marks AWSCURRENT
DescribeSecret	Metadata and version stages
ListSecrets	Secrets in your account
DeleteSecret	Soft-delete (RecoveryWindowInDays) or ForceDeleteWithoutRecovery
RotateSecret	Coming soon

Limits & errors

• Duplicate create → ResourceExistsException
• Missing secret → ResourceNotFoundException
• Soft-deleted secrets reject Get/Put until force-deleted or window ends
• Customer-managed KMS keys are ignored (x-cloud-ignored) in v1

Related

• Auth
• Gateway
• Roadmap