SECRETS MANAGEMENT

FIELD DESCRIPTION TYPE DEFAULT VALUE(S) ALLOWED VALUE(S)
enabled whether this part of the policy will be enforced Boolean true true, false
compensatingControl whether there’s another mechanism to handle this (elsewhere) in the stack Boolean false true, false
config secrets management settings
environmentVariables names of environment variables holding secrets String Array null
sourceControl I’ll admit it => I totally forgot what this is for…I think it means putting secrets in your source code?
enabled turn this on or off Boolean false true, false
expires something’s going to expire in some number of seconds…I think I wrote thisin a fever dream Number(int) 600 Any integer >= 0 (0 = doesn’t expire)