Secure secrets

<bsp-snippet data-snippet-state="{"cms.site.owner":{"_ref":"0000017a-e99b-d9c6-a5fa-eddf364e0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30006"},"cms.content.publishDate":1683653222901,"cms.content.publishUser":{"_ref":"00000171-7e3f-db90-a57b-7ebfd55a0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30018"},"cms.content.updateDate":1683653222901,"cms.content.updateUser":{"_ref":"00000171-7e3f-db90-a57b-7ebfd55a0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30018"},"rekognitionVideo.timeFrameMetadata":[],"snippet":{"_ref":"0000017b-64ac-d86b-a77f-6dad65240000","_type":"d2a205aa-dd4d-3a6e-acf9-d4f7609d4d35"},"theme.0000017a-e99c-d9c6-a5fa-eddf027f0000.:core:enhancement:Enhancement.hbs.enhancementAlignment":null,"theme.0000017a-e99c-d9c6-a5fa-eddf027f0000.:core:enhancement:Enhancement.hbs._preset":null,"_id":"00000188-018d-d077-ad88-71bd57d90000","_type":"968481a3-3236-3bd5-82c4-ba78207b9d17"}"> Brightspot provides a data model and service for securely storing secrets in the CMS. This can be used to securely store sensitive data, such as API keys or passwords. The system can either store the secret value in the <bsp-snippet data-snippet-state="{"cms.site.owner":{"_ref":"0000017a-e99b-d9c6-a5fa-eddf364e0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30006"},"cms.content.publishDate":1683653231037,"cms.content.publishUser":{"_ref":"00000171-7e3f-db90-a57b-7ebfd55a0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30018"},"cms.content.updateDate":1683653231037,"cms.content.updateUser":{"_ref":"00000171-7e3f-db90-a57b-7ebfd55a0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30018"},"rekognitionVideo.timeFrameMetadata":[],"snippet":{"_ref":"0000017b-64ac-d86b-a77f-6dad65240000","_type":"d2a205aa-dd4d-3a6e-acf9-d4f7609d4d35"},"theme.0000017a-e99c-d9c6-a5fa-eddf027f0000.:core:enhancement:Enhancement.hbs.enhancementAlignment":null,"theme.0000017a-e99c-d9c6-a5fa-eddf027f0000.:core:enhancement:Enhancement.hbs._preset":null,"_id":"00000188-018d-d077-ad88-71bd76a90000","_type":"968481a3-3236-3bd5-82c4-ba78207b9d17"}"> database or externally in a third-party service. <bsp-snippet data-snippet-state="{"cms.site.owner":{"_ref":"0000017a-e99b-d9c6-a5fa-eddf364e0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30006"},"cms.content.publishDate":1683653242484,"cms.content.publishUser":{"_ref":"00000171-7e3f-db90-a57b-7ebfd55a0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30018"},"cms.content.updateDate":1683653242484,"cms.content.updateUser":{"_ref":"00000171-7e3f-db90-a57b-7ebfd55a0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30018"},"rekognitionVideo.timeFrameMetadata":[],"snippet":{"_ref":"0000017b-64ac-d86b-a77f-6dad65240000","_type":"d2a205aa-dd4d-3a6e-acf9-d4f7609d4d35"},"theme.0000017a-e99c-d9c6-a5fa-eddf027f0000.:core:enhancement:Enhancement.hbs.enhancementAlignment":null,"theme.0000017a-e99c-d9c6-a5fa-eddf027f0000.:core:enhancement:Enhancement.hbs._preset":null,"_id":"00000188-018d-d325-abee-b3bda4ee0000","_type":"968481a3-3236-3bd5-82c4-ba78207b9d17"}"> currently provides two secret storage services: Database Secret Service: An in-database storage with PBKDF2WithHmacSHA256 encryption. AWS Secret Service: An integration with <a href="https://docs.aws.amazon.com/secretsmanager/index.html" target="_blank" link-data="{"cms.site.owner":{"_ref":"0000017a-e99b-d9c6-a5fa-eddf364e0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30006"},"cms.content.publishDate":1683305788089,"cms.content.publishUser":{"_ref":"00000179-3cab-da41-a97d-7daf3dda0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30018"},"cms.content.updateDate":1683305788089,"cms.content.updateUser":{"_ref":"00000179-3cab-da41-a97d-7daf3dda0000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ee30018"},"rekognitionVideo.timeFrameMetadata":[],"link":{"rekognitionVideo.timeFrameMetadata":[],"target":"NEW","attributes":[],"url":"https://docs.aws.amazon.com/secretsmanager/index.html","_id":"00000187-ecd7-d9d4-a3af-eff7e1490000","_type":"0000015d-56b9-d2db-a5dd-f6fd6ed00010"},"linkText":"AWS Secrets Manager","theme.0000017a-e99c-d9c6-a5fa-eddf027f0000.:core:link:Link.hbs.linkStyle":null,"theme.0000017a-e99c-d9c6-a5fa-eddf027f0000.:core:enhancement:Enhancement.hbs.enhancementAlignment":null,"theme.0000017a-e99c-d9c6-a5fa-eddf027f0000.:core:link:Link.hbs._template":null,"theme.0000017a-e99c-d9c6-a5fa-eddf027f0000.:core:link:Link.hbs._preset":null,"theme.0000017a-e99c-d9c6-a5fa-eddf027f0000.:core:enhancement:Enhancement.hbs._preset":null,"_id":"00000187-ecd7-d9d4-a3af-eff7e1340000","_type":"00000162-ab56-d787-af72-fb57299f0000"}">AWS Secrets Manager to store the secret in AWS Cloud. The secrets system provides a way to implement custom secret service storage solutions.