Scaleway Secret Manager

Managed secret storage service for API keys, passwords, certificates, and other sensitive data. Encrypts and centralizes secrets across your infrastructure to reduce exposure risks and simplify access control.

Part of Scaleway's European cloud platform, Secret Manager uses envelope encryption with AES-256 via the integrated Key Management System. It fits teams running on Scaleway's Kubernetes Kapsule, databases, or serverless functions and integrates with common DevOps tooling.

Key capabilities:

• AES-256 encryption at rest via KMS with optional client-managed keys
• Versioning for every secret update, with full audit trail
• Kubernetes integration through External Secrets Operator
• Infrastructure-as-code support with Terraform and Ansible
• IAM-based access control for fine-grained permissions
• GitHub Actions integration for CI/CD secret injection

Use cases: securing containerized web apps by syncing database credentials into Kubernetes, injecting API keys into CI pipelines without hardcoding, and centralizing secrets for Terraform-managed infrastructure across staging and production.