{"id":"secretmanager-default-encryption-aes256-tls","text":"Secret Manager encrypts all secrets with AES-256 at rest and TLS in transit by default with no configuration required; CMEK is available for customer-controlled keys.","truth_value":"IN","source":"entries/2026/03/11/secretmanager-overview.md","source_url":"","source_hash":"e2d124d0ca7fd01a","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"secretmanager-default-encryption-aes256-tls","truth_value":"IN","reason":"premise"}]}}