This content is open to everyone — sign in to save your progress, earn points, and unlock module exams.
Topic 4.6 of Data Protection for Cloud Infrastructure
Architecture and tooling for managing database passwords, API keys, and certificates in cloud — AWS Secrets Manager, SSM Parameter Store, HashiCorp Vault, and Kubernetes External Secrets Operator.
By the end of this topic, you will
Quadrant 1 · e-Tutorial
Quadrant 2 · e-Content
Quadrant 3 · Web Resources
Downloadable reference material
External links
AWS Secrets Manager Documentation
Complete AWS Secrets Manager documentation including rotation, access control, and cross-account sharing.
HashiCorp Vault Documentation
Official HashiCorp Vault documentation for secrets engines, auth methods, and policies.
External Secrets Operator for Kubernetes
External Secrets Operator documentation for syncing cloud secrets into Kubernetes.
GitGuardian State of Secrets Sprawl 2024
Annual report on secrets exposure in public repositories — statistics and trends.
Quadrant 4 · Self-Assessment
Data Protection in the Cloud
Envelope encryption, AES modes, post-quantum cryptography, tokenisation, PKI, key management models, and IAM.
Cloud Security: Complete Assessment
Comprehensive 120-question assessment covering all six chapters of the Cloud Security eBook 2026.
