Skip to main content

Crypto / Secrets

Secret Management Capabilities

Version: DEV

IDTitleDescriptionThreat Mappings
CCC.SecMgmt.CP01Secret StorageProvides secure storage for sensitive data such as API keys, passwords, certificates, and other secrets.
0
CCC.SecMgmt.CP02Secret Creation - PlaintextAbility to create new secrets as basic string data for storing sensitive data such as API keys and database credentials.
0
CCC.SecMgmt.CP03Secret Creation - JSON ObjectsAbility to create new secrets as complex JSON objects with multiple fields for storing sensitive data.
0
CCC.SecMgmt.CP04Secret Creation - Binary DataAbility to create new secrets as binary data for storing certificates and private keys.
0
CCC.SecMgmt.CP05Update SecretsAbility to update a secret value or description after creation.
0
CCC.SecMgmt.CP06Soft Delete SecretsPrevent secrets from being deleted immediately. Soft deletion makes secrets inaccessible and schedules them for deletion after a recovery window.
0
CCC.SecMgmt.CP07Automatic Secret RotationSupports automatic rotation of secrets based on a defined schedule or triggers to enhance security.
0
CCC.SecMgmt.CP08Secret Replication PoliciesAllows configuration of secret replication policies to control replication of secrets, supporting compliance with data residency requirements.
0
CCC.SecMgmt.CP09Secure Secret RetrievalOffers a secure API and SDK access for retrieving secrets, ensuring that secrets are transmitted securely to authorized clients.
0

Imports

IDRemarks
CCC.Core.CP01Encryption in Transit Enabled by Default
CCC.Core.CP02Encryption at Rest Enabled by Default
CCC.Core.CP03Access Log Publication
CCC.Core.CP06Access Control
CCC.Core.CP07Event Publication
CCC.Core.CP09Metrics Publication
CCC.Core.CP10Log Publication
CCC.Core.CP11Backup
CCC.Core.CP12Recovery
CCC.Core.CP14API Access
CCC.Core.CP18Resource Versioning
CCC.Core.CP20Resource Tagging
CCC.Core.CP28Command-line
CCC.Core.CP30Passive Ingestion