Important
Secrets cannot be moved from one region to another after creation.
How to create secrets with Secret Manager
Reviewed on 12 February 2024 • Published on 21 February 2023
The secret creation process slightly differs depending on whether you are using Secret Manager for the first time or not. This page explains how to create a secret for the first time using the Scaleway console and how to create a secret if you have already created resources in Secret Manager.
Before you start
To complete the actions presented below, you must have:
- A Scaleway account logged into the console
- Owner status or IAM permissions allowing you to perform actions in the intended Organization
- Click Secret Manager in the Security and Identity section of the Scaleway console side menu.
- Click + Create secret.
- Choose the region in which you want to create your secret.
- Create a path in which to store your secret. The path name must be prefixed with a slash.
- Enter a name for your secret and add optional tags.
- Add your secret manually or import it from a file.
Note
The maximum file size for your secret is 64 KiB.
- Optionally, click «Toogle Icon» to enable secret protection.
- Optionally, click «Toogle Icon» next to Single access or Time to Live to apply an ephemeral policy to your secret and its versions.
Important
- Single access: allows you to set your secret versions to expire after one single access.
- Time to Live: allows you to set a time frame of up to one year, during which your secret versions are valid and accessible.
- The ephemeral policy can only be applied to a secret at creation, and cannot be removed once applied.
- Once applied to a secret, the ephemeral policy’s settings will be applied to all the secret’s versions, even those created subsequently.
- Click Create secret. The Overview tab of your secret displays.
Note
- The value of your secret is stored in its first version, which is enabled by default. At creation, your secret only has one version. Find out how to add more versions to your secret.
- Your path and secret are created on the go.
- Click Secret Manager in the Security and Identity section of the Scaleway console side menu.
- Select your desired region in the Region drop-down.
Important
Secrets cannot be moved from one region to another after creation.
- Click + Create secret.
- Choose a path for your secret:
- Enter an existing path.
- Create a new path. The path name must be prefixed with a slash.
- Enter a name for your secret and add optional tags.
- Add your secret manually or import it from a file.
Note
The maximum file size for your secret is 64 KiB.
- Optionally, click «Toogle Icon» to enable secret protection.
- Optionally, click «Toogle Icon» next to Single access or Time to Live to apply an ephemeral policy to your secret and its versions.
Important
- Single access: allows you to set your secret versions to expire after one single access.
- Time to Live: allows you to set a time frame of up to one year, during which your secret versions are valid and accessible.
- The ephemeral policy can only be applied to a secret at creation, and cannot be removed once applied.
- Once applied to a secret, the ephemeral policy’s settings will be applied to all the secret’s versions (even those created subsequently).
- Click Create secret. The Overview tab of your secret displays.
Note
- The value of your secret is stored in its first version, which is enabled by default. At creation, your secret only has one version. Find out how to add more versions to your secret.
- If you have created a path that did not exist yet, your path and secret are created on the go.
See also