A customer needs an alternative to storing their plain text secrets in their source-code management (SCM) system. How should the customer achieve…

Storing secrets securely is crucial for maintaining the integrity and confidentiality of your

applications. Here is how you can achieve this using Google Cloud Platform:

Encrypt the Secrets: Use Customer-Managed Encryption Keys (CMEK) to encrypt your secrets. CMEK

allows you to have greater control over the encryption keys used to protect your data. This ensures

that even if the storage medium is compromised, the secrets remain protected by strong encryption.

Store in Cloud Storage: Store the encrypted secrets in Google Cloud Storage. Cloud Storage is a

secure and scalable object storage service. By using encrypted storage, you can ensure that the

secrets are securely stored and can only be accessed by authorized entities.

This method provides a secure and managed way to store secrets, ensuring that they are not exposed

in plain text within your source code management system.

Reference:

Customer-Managed Encryption Keys (CMEK)

Google Cloud Storage Security