Unverified60% confidenceFactExact time
AWS Secrets Manager uses envelope encryption via AWS KMS, where a data key encrypts the actual secret content, and the data key itself is encrypted by the KMS master key.
2
Sources
60%
Confidence
Long-term
Relevance
8/18/2026
First Seen
Sources
Related Claims
UnverifiedAWS KMS使用硬件安全模块（HSM）保护主密钥，支持密钥自动轮换和细粒度IAM访问控制79% similarUnverifiedAWS Secrets Manager 支持自动轮换 RDS 数据库密码78% similarUnverifiedSensitive credentials such as Client ID and Client Secret should be securely stored via AWS Secrets Manager rather than hardcoded in source code.78% similarUnverifiedMCP's credential management mechanism stores keys in server environment variables or secret management services (such as AWS Secrets Manager).77% similarUnverifiedA common approach to reversible storage is to encrypt with symmetric encryption (such as AES-GCM) before storing, with a key management service (KMS) holding the master key.76% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/767638API
curl https://kongchang.com/api/v1/knowledge/claims/767638MCP
get_claim(id=767638)