Status: IN
Secret Manager stores actual secret values (viewable with permissions); Cloud KMS stores cryptographic keys (never viewable/extractable).
Source: entries/2026/03/11/secretmanager-overview.md
JSON