Cloud Secrets List

The Secrets > Integrations > Cloud Secrets screen lists all configured sync definitions with the following columns: Sync Name, Cloud Provider, Account Name, Target, Region, Secret Synced, Status, Last Sync Result, Last Successful Sync, and Actions.

Figure – Cloud Secrets List Screen

Click +Add on the Cloud Secrets screen and select a Cloud Provider to open the Add Sync form. The fields differ per provider:

AWS

· Sync Name: text.

· AWS Account: dropdown, populated from Administration > Cloud Integration AWS accounts that have the Vault module enabled.

· Region: text (e.g. us-east-2).

· Owner: dropdown.

Figure – Add Sync – AWS

Microsoft Azure

· Sync Name: text.

· Azure Account: dropdown, populated from Administration > Cloud Integration Azure accounts that have the Vault module enabled.

· Azure Key Vault URI: text (e.g. management.azure.com).

· Azure Key Vault Name: text (e.g. KeyVaultTest).

· Region: text (e.g. eastus).

Figure – Add Sync – Azure

Google Cloud Platform

· Sync Name: text.

· GCP Account: dropdown, populated from Administration > Cloud Integration GCP accounts that have the Vault module enabled.

· Project ID: text (e.g. project-id-12345).

· Owner: dropdown.

Figure – Add Sync – GCP

Region, Azure Key Vault Name, and Project ID are currently free-text fields. A typo (for example eu-centarl-1 instead of eu-central-1) can cause the sync job to fail silently. Enter these values exactly as they appear in the cloud provider's console.