Unverified60% confidenceFactExact time
AWS Secrets Manager uses envelope encryption via AWS KMS, where a data key encrypts the actual secret content, and the data key itself is encrypted by the KMS master key.
2
Sources
60%
Confidence
Long-term
Relevance
8/18/2026
First Seen
Sources
Related Claims
UnverifiedAWS KMS使用硬件安全模块（HSM）保护主密钥，支持密钥自动轮换和细粒度IAM访问控制79% similarUnverifiedAWS Secrets Manager 支持自动轮换 RDS 数据库密码78% similarUnverifiedSensitive credentials such as Client ID and Client Secret should be securely stored via AWS Secrets Manager rather than hardcoded in source code.78% similarUnverifiedMCP's credential management mechanism stores keys in server environment variables or secret management services (such as AWS Secrets Manager).77% similarUnverifiedMantle 实现零操作者访问，使用客户账户专属 KMS 密钥对推理数据进行信封加密，密钥材料从不以明文形式离开 HSM，AWS 工程师无法访问推理数据74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/767638API
curl https://kongchang.com/api/v1/knowledge/claims/767638MCP
get_claim(id=767638)