Secret Manager is a secure and convenient storage system for API keys, passwords, certificates, and other sensitive data. This page describes the differences between the Cloud de Confiance and Google Cloud versions of Secret Manager.
For more detailed information about Secret Manager, see the Secret Manager overview and the rest of the Secret Manager documentation.
Key differences
There are some differences between the Cloud de Confiance version of Secret Manager and the Google Cloud version. Some notable differences include the following:
- User-managed replication for secrets is unavailable.
- Only the v1 version of the Secret Manager API is available.
- Regional endpoints are unavailable.
A more detailed list of differences is provided in the rest of this section. If you are already familiar with Google Cloud, we recommend that you review these differences carefully, particularly before designing an application to run on Cloud de Confiance. We also recommend reviewing the general differences between Cloud de Confiance and Google Cloud.
If you would like to use a particular Secret Manager feature that isn't currently available in Cloud de Confiance, contact Cloud de Confiance support. To be notified when new features roll out in Cloud de Confiance, subscribe to the release notes. Unless otherwise specified, features that are in preview are not available in Cloud de Confiance.
Availability and disaster recovery
| Secret replication |
Secrets with user-managed replication are unavailable. To create a secret without specifying a storage region, use automatic replication. To meet data residency requirements, create regional secrets. |
Workflows and tools
| API versions |
Only the v1 version of the Secret Manager API is available. The v1beta1 and v1beta2 API versions are unavailable. |
Network
| Regional endpoints |
Regional endpoints are unavailable. Instead of using regional endpoints, Cloud de Confiance automatically directs traffic to the appropriate regional stack using a Global Service Load Balancer. The URL format for accessing regional secrets differs between Google Cloud and Cloud de Confiance universes. Google Cloud:
Cloud de Confiance:
|
Related guides
The following information might also affect how you use and design for Secret Manager in Cloud de Confiance by S3NS. These guides include general information about working in Cloud de Confiance, including documentation, security and access control, billing, tooling, and service usage.
For details about other services and features in Cloud de Confiance and their differences from their Google Cloud counterparts, see the product list.