GCP Secret Manager is a secrets and credential management service that lets one store and manage sensitive data such as API keys, usernames, passwords, certificates, and more. The service enables one to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.

The GCP Secrets Manager plugin:

  1. Connects to your GCP account using a Service account key and IAM permissions.
  2. Discovers all secrets stored in GCP projects. These include: 
    • API keys
    • Secrets
    • Certificates
  3. Extracts detailed metadata with support for various secret configurations. These include labels, annotations, expiration times, and rotation policies.

This plugin does not support incremental scanning