Status: IN
Secret Manager encrypts all secrets with AES-256 at rest and TLS in transit by default with no configuration required; CMEK is available for customer-controlled keys.
Source: entries/2026/03/11/secretmanager-overview.md
JSON