Zeema
New design
Catalogue / Security

Key management

securitykey-management

Holds keys and secrets and rotates them.

Category
Security
Properties
5
Components
54
Rules
0
Properties · 5 defined by this kind

A node of this kind resolves each property from its own props, then the component's defaults, then the default below.

propertytypevaluesrequireddefault
envelopeEncryptionboolean—nofalse
hsmboolean—nofalse
managedboolean—notrue
rotationAutomatedboolean—nofalse
rotationDaysinteger—no—
Rules for this kind · 0
No rule selects this kind or its category. Governance calls that a recorded gap.
Components · 54
vendor-neutral
Generic key managementkey-managementgenericthe kind itself
alibabacloud
Certificate Management Servicealibaba-certificate-management1 defaultsData Encryption Servicealibaba-data-encryption-service2 defaults
aws
AWS Certificate Manageraws-acm5 defaultsAWS KMSaws-kms4 defaultsAWS Payment Cryptographyaws-payment-cryptography4 defaultsAWS Private Certificate Authorityaws-private-ca4 defaultsAWS Secrets Manageraws-secrets-manager4 defaultsAWS Signeraws-signer3 defaultsAWS Systems Manager Parameter Storeaws-ssm-parameter-store2 defaultsAWS CloudHSMcloudhsm4 defaults
azure
Artifact Signingazure-artifact-signing3 defaultsAzure Cloud HSMazure-cloud-hsm2 defaultsAzure Dedicated HSMazure-dedicated-hsm3 defaultsAzure Key Vaultazure-key-vault3 defaultsAzure Key Vault Managed HSMazure-managed-hsm3 defaults
cloudflare
Advanced Certificate Managercloudflare-advanced-certificate-manager2 defaultsCloudflare Geo Key Managercloudflare-geo-key-manager1 defaultsCloudflare Keyless SSLcloudflare-keyless-ssl1 defaultsCloudflare mTLS client certificatescloudflare-mtls1 defaultsCloudflare Origin CAcloudflare-origin-ca1 defaultsCloudflare Secrets Storecloudflare-secrets-store3 defaultsCloudflare Universal SSLcloudflare-ssl-tls2 defaults
default
Bitwardenbitwarden3 defaultscert-managercert-manager4 defaultsCyberArk Conjurconjur3 defaultsDopplerdoppler2 defaultsEJBCAejbca3 defaultsEntrust nShield HSMentrust-nshield3 defaultsHashiCorp Vaulthashicorp-vault3 defaultsHCP Vault Dedicatedhcp-vault3 defaultsInfisicalinfisical3 defaults1Password Connectonepassword-connect3 defaultsOpenBaoopenbao3 defaultsSealed Secretssealed-secrets4 defaultsSmallstep step-castep-ca3 defaultsThales Luna HSMthales-luna-hsm3 defaults
gcp
Certificate Authority Servicegoogle-certificate-authority-service3 defaultsCertificate Managergoogle-certificate-manager3 defaultsCloud External Key Managergoogle-cloud-ekm4 defaultsCloud HSMgoogle-cloud-hsm4 defaultsGoogle Cloud KMSgoogle-cloud-kms4 defaultsParameter Managergoogle-parameter-manager3 defaultsSecret Managergoogle-secret-manager4 defaults
ibm
IBM Cloud Hyper Protect Crypto Servicesibm-hyper-protect-crypto-services4 defaultsIBM Key Protectibm-key-protect4 defaultsIBM Cloud Secrets Manageribm-secrets-manager2 defaults
k8s
Secretk8s-secret4 defaults
oci
OCI Certificatesoci-certificates4 defaultsOCI External Key Managementoci-external-key-management4 defaultsOCI Secret Management Serviceoci-secret-management4 defaultsOCI Vaultoci-vault4 defaultsOCI Virtual Private Vaultoci-virtual-private-vault4 defaults
openstack
OpenStack Barbicanopenstack-barbican1 defaults
Source
# yaml-language-server: $schema=../schema/kind.schema.json
# Abstract kind: Holds keys and secrets and rotates them (KMS, HSM, Vault, Secrets Manager).
schemaVersion: "1"
type: "kind"
id: "key-management"
category: "security"
properties:
  hsm:
    type: "boolean"
    default: false
  rotationAutomated:
    type: "boolean"
    default: false
  rotationDays:
    type: "integer"
  envelopeEncryption:
    type: "boolean"
    default: false
  managed:
    type: "boolean"
    default: true

The same page as markdown, for an agent: /catalogue/kinds/key-management.md