Secure storage, rotation, and delivery of secrets (API keys, database credentials, TLS certificates) for applications and infrastructure.
| Kubernetes + Multi-Cloud | Vault + ESO | Cloud Secret Manager + ESO | | Kubernetes + Single Cloud | Cloud Secret Manager + ESO | Vault + ESO | | Serverless (AWS Lambda) | AWS Secrets Manager | AWS Parameter Store | | Multi-Cloud Enterprise | HashiCorp Vault | Doppler (SaaS) | | Small Team (<10 apps) | Doppler, Infisical | 1Password Secrets Automation |
| GitOps-Centric | SOPS (git-encrypted) | Sealed Secrets (K8s-only) |
Administrar secretos (claves API, credenciales de bases de datos, certificados) con Vault, proveedores de nube y Kubernetes. Úselo al almacenar datos confidenciales, rotar credenciales, sincronizar secretos con Kubernetes, implementar secretos dinámicos o escanear código en busca de secretos filtrados. Fuente: ancoleman/ai-design-components.