Building Uber’s Multi-Cloud Secrets Management Platform to Enhance Security

Uber built a Secret Management Platform to consolidate vaults and automate secret monitoring and rotation. They use real-time and scheduled scanning to catch leaks early and reduce exposure. They also enable automatic rotation of 20,000 secrets per month on average, prioritizing certain types and platforms first. Additionally, they designed a Secure Secret eXchange system to securely share secrets with third-party vendors without human involvement.