Secrets

Secrets overview

Configuration that never ships inside a build.

Model

  • Names look like environment variables: [A-Za-z_][A-Za-z0-9_]*, up to 128 characters.
  • Values are encrypted with AES-256-GCM under a key used only for customer secrets — never DevSewa’s own identity secrets.
  • The console lists, sets and deletes. Only your backend, presenting the application’s client secret, can reveal a value.
  • Set and delete are recorded in the audit log by name; values are never logged.