How to create and manage secrets with Grafana Cloud Synthetic Monitoring
Blog post from Grafana Labs
Grafana Cloud Synthetic Monitoring now offers a secrets management feature that enhances security by allowing users to securely store and manage sensitive credentials like API keys, passwords, and tokens for synthetic monitoring checks. This feature encrypts sensitive data at rest and automatically redacts it in logs and outputs, while providing centralized storage for easy credential management and rotation. Grafana Cloud users with the appropriate roles can create, edit, and use secrets in their synthetic monitoring tests, ensuring that sensitive data is protected during API testing, user workflow validation, and external service access. The feature supports various check types, with future plans to expand its applicability, and offers a straightforward setup process that includes importing and referencing secrets in scripts, organizing checks with labels, and selecting probe locations. Automatic redaction of secret values in logs and outputs prevents accidental exposure, and users can manage their secrets through a dedicated interface, updating or deleting them as needed without disrupting existing tests. This addition to Grafana Cloud is available to all users, offering a secure and scalable way to handle authentication credentials in monitoring infrastructure.