--- title: "Secrets Management & Encryption" description: "Protect sensitive data on STACKIT: secrets management, encryption and key management, and Confidential Computing for data-in-use protection." scfAsset: managed: false category: "guide" maintainers: - user: "can.celik1" external: true tags: ["STACKIT University", "Learning", "Secrets Manager", "KMS", "Encryption", "Security"] source_url: "https://framework.stackit.cloud/architecture/assetcontainer/stackit/secrets-management-encryption/" source_file: "docs/architecture/assetcontainer/stackit/secrets-management-encryption.mdx" --- ## Course Overview Over four modules, this course covers the foundational practices for protecting sensitive data in the cloud: sensitive-data fundamentals and the risks of poor credential handling, secure secret storage using STACKIT Secrets Manager, encryption and key lifecycle management through the Key Management Service (KMS), and Confidential Computing for protecting data while it's actively being processed. Encryption at rest and in transit is standard practice, but it leaves a gap most teams don't think about: data being processed in memory is typically plaintext, readable by anyone with sufficient host, hypervisor, or physical access — including privileged insiders and certain side-channel attacks. This course walks through all three states of data (at rest, in transit, and in use) and shows where Confidential Computing closes that last gap, alongside the everyday discipline of not leaking credentials into application code, logs, or CI/CD pipelines. ### What You'll Learn - Securely store and manage secrets using STACKIT Secrets Manager - Apply secure credential-handling practices in applications and CI/CD pipelines - Manage encryption keys and key rotation through STACKIT's Key Management Service (KMS) - Reason about data protection across all three states: at rest, in transit, and in use - Apply Confidential Computing where standard encryption isn't enough ### Modules - Secrets & Sensitive Data Fundamentals - Secret Management on STACKIT - Encryption & Key Management - Confidential Computing on STACKIT