docs(sem): add secret deletion (#4851)

Author: nerda-codes

menu/navigation.json

@@ -576,12 +576,20 @@
                     "slug": "manage-version"
                   },
                   {
-                    "label": "Delete a secret",
+                    "label": "Schedule a secret deletion",
                     "slug": "delete-secret"
                   },
                   {
-                    "label": "Delete a version",
+                    "label": "Schedule a version deletion",
                     "slug": "delete-version"
+                  },
+                  {
+                    "label": "Recover secrets scheduled for deletion",
+                    "slug": "recover-secrets"
+                  },
+                  {
+                    "label": "Recover a version scheduled for deletion",
+                    "slug": "recover-version"
                   }
                 ],
                 "label": "How to",

pages/secret-manager/concepts.mdx

@@ -7,7 +7,7 @@ content:
   paragraph: Discover essential concepts of Scaleway Secret Manager, including secret versioning, ephemeral policies, and path management.
 tags: secret-manager secret version
 dates:
-  validation: 2025-01-13
+  validation: 2025-04-15
 ---
 
 ## Disabling a version
@@ -109,12 +109,18 @@ Secret types refer to the different kinds of sensitive data you can store with S
 
 Upon secret creation, you must choose a secret type that will also be applied to the secret version. All the secret's subsequent versions must be of the same type.
 
+## Scheduled deletion
+
+Scheduled deletion lets you mark a secret and its versions for deletion ahead of time. Instead of immediate deletion, the secret enters a 7-day pending deletion period, during which you can still [recover it](/secret-manager/how-to/recover-secrets/).
+
+During this time, you can read secret versions but cannot edit, access, or delete them. After the retention period, the secret and all its versions are permanently deleted. You can also schedule a secret version for deletion without impacting the secret associated with the version.
+
+Recovering deleted secrets is billed €0.01 per version associated with the secret.
+
 ## Tag
 
 Tags allow you to organize your secrets. This gives you the possibility of sorting and filtering your secrets in any organizational pattern of your choice, which in turn helps you arrange, control, and monitor your secrets.
 
 ## Version
 
-Versions store the data contained in your secret (API keys, passwords, or certificates). Versions can be [**enabled**](#enabling-a-version) or [**disabled**](#disabling-a-version) depending on your usage. Versions must be of the same type as the secret they belong to.
-
-
+Versions store the data contained in your secret (API keys, passwords, or certificates). Versions can be [**enabled**](#enabling-a-version) or [**disabled**](#disabling-a-version) depending on your usage. Versions must be of the same type as the secret they belong to.

pages/secret-manager/faq.mdx

@@ -5,7 +5,7 @@ meta:
 content:
   h1: Secret Manager FAQ
 dates:
-  validation: 2025-04-01
+  validation: 2025-04-15
 category: identity-and-access-management
 productIcon: SecretManagerProductIcon
 ---
@@ -40,3 +40,5 @@ To understand the secrets encryption process, refer to our [related documentatio
 At the end of the month, you are billed for the number of secret versions stored and API requests made on the service.
 A secret version is billed if it is in an enabled or disabled state.
 If, for example, you have used a secret version for five days, you will only be billed for the five days and not for the whole month. Find out more about pricing on our [dedicated page](https://www.scaleway.com/en/pricing/?tags=available).
+
+Recovering secrets [scheduled for deletion](/secret-manager/concepts/#scheduled-deletion) is billed €0.01 per version associated with the secret.

pages/secret-manager/how-to/delete-secret.mdx

@@ -5,15 +5,17 @@ meta:
 content:
   h1: How to delete a secret
   paragraph: Discover how to securely delete secrets using Scaleway's intuitive console. Follow these steps to manage your sensitive data effectively.
-tags: secret sensitive-data storage-system
+tags: secret sensitive-data storage-system schedule-deletion
 dates:
-  validation: 2025-03-14
+  validation: 2025-04-15
   posted: 2023-02-21
 categories:
   - identity-and-access-management
 ---
 
-This page explains how to delete a [secret](/secret-manager/concepts/#secret) using the [Scaleway console](https://console.scaleway.com). You **cannot delete protected secrets**, i.e. secrets to which you have applied [secret protection](/secret-manager/concepts/#secret-protection).
+This page explains how to [schedule a secret deletion](/secret-manager/concepts/#scheduled-deletion) using the [Scaleway console](https://console.scaleway.com). You **cannot delete protected secrets**, i.e. secrets to which you have applied [secret protection](/secret-manager/concepts/#secret-protection).
+
+Once you schedule a secret for deletion, it enters a 7-day pending deletion period, during which you can still [recover it](/secret-manager/how-to/recover-secrets/). After this retention period, the secret and all its versions are permanently deleted.
 
 <Macro id="requirements" />
 
@@ -25,13 +27,10 @@ This page explains how to delete a [secret](/secret-manager/concepts/#secret) us
 
 1. Click **Secret Manager** in the **Security and Identity** section of the [Scaleway console](https://console.scaleway.com/) side menu.
 2. Select the [region](/secret-manager/concepts/#region) in which to delete the secret, in the **Region** drop-down.
-3. Access the secret you wish to delete. The secret's **Overview** tab displays.
-4. Scroll down and click **Delete secret**. A pop-up displays.
-5. Type **DELETE** and click **Delete secret**.
+3. Click <Icon name="more" /> next to the secret you want to delete and click **Delete**. A pop-up displays informing you that the action schedules the deletion of your secret and its version.
+4. Type **DELETE** and click **Delete secret** to confirm. Your secret displays in the **Scheduled for deletion** tab for a period of 7 days before being permanently deleted.
 
 <Message type="important">
-  - Although you cannot delete a [protected secret](/secret-manager/concepts/#secret-protection), you can delete its versions
-  - Deleting a secret is a permanent action. It erases every version you have created for your secret
+  - Although you cannot delete a [protected secret](/secret-manager/concepts/#secret-protection), you can delete its versions.
+  - Deleting a secret is a permanent action. It erases every version you have created for your secret if you do not [recover it](/secret-manager/how-to/recover-secrets/) before the end of the retention period.
 </Message>
-
-

pages/secret-manager/how-to/delete-version.mdx

@@ -7,13 +7,15 @@ content:
   paragraph: Learn how to securely delete versions of secrets using the Scaleway console. Follow these steps to effectively manage your sensitive data.
 tags: sensitive-data storage-system api-key
 dates:
-  validation: 2025-03-14
+  validation: 2025-04-15
   posted: 2023-02-21
 categories:
   - identity-and-access-management
 ---
 
-This page explains how to delete a secret [version](/secret-manager/concepts/#version) using the [Scaleway console](https://console.scaleway.com).
+This page explains how to [schedule](/secret-manager/concepts/#scheduled-deletion) a [version](/secret-manager/concepts/#version) deletion using the [Scaleway console](https://console.scaleway.com).
+
+Once you schedule a version for deletion, it enters a 7-day pending deletion period, during which you can still [recover it](/secret-manager/how-to/recover-version/). After this retention period, the version is permanently deleted.
 
 <Macro id="requirements" />
 
@@ -27,11 +29,11 @@ This page explains how to delete a secret [version](/secret-manager/concepts/#ve
 3. Access the secret for which you want to delete the version. Your secret's **Overview** tab displays.
 4. Click the **Versions** tab.
 5. Click <Icon name="more" /> next to the version you want to delete.
-6. Click **Delete**. A pop-up displays.
-7. Type **DELETE** and click **Delete version**.
+6. Click **Delete**. A pop-up displays informating you that the action schedules the deletion of your version.
+7. Type **DELETE** and click **Delete version**. Your version enters the **Scheduled for deletion** status for a period of 7 days before being permanently deleted.
 
 <Message type="important">
- Deleting a version is permanent. You will not be able to use the version again.
+ Deleting a version is permanent. You will not be able to use the version again if you do not [recover it](/secret-manager/how-to/recover-version/) before the end of the retention period.
 </Message>
 
 

pages/secret-manager/how-to/recover-secrets.mdx

@@ -0,0 +1,48 @@
+---
+meta:
+  title: How to recover secrets scheduled for deletion
+  description: Recover secrets scheduled for deletion in the Scaleway console before they are permanently removed.
+content:
+  h1: How to recover secrets scheduled for deletion
+  paragraph: Recover secrets scheduled for deletion in the Scaleway console before they are permanently removed.
+tags: secret sensitive-data scheduled-deletion recover-secret
+dates:
+  validation: 2025-04-15
+  posted: 2025-04-15
+categories:
+  - identity-and-access-management
+---
+
+This page shows you how to recover secrets scheduled for deletion using the Scaleway [console](https://console.scaleway.com). Once you schedule a secret for deletion, it enters a 7-day pending deletion period, during which you can still recover it.
+After this retention period, the secret and all its versions are permanently deleted.
+
+<Message type="important">
+  Scheduled deletion deletes ephemeral secrets and their versions immediately.
+</Message>
+
+<Macro id="requirements" />
+
+- A Scaleway account logged into the [console](https://console.scaleway.com)
+- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization
+- Created a [secret](/secret-manager/how-to/create-secret/)
+- Scheduled secrets for deletion
+
+## How to recover one secret
+
+1. Click **Secret Manager** in the **Security and Identity** section of the [Scaleway console](https://console.scaleway.com/) side menu.
+2. Select the [region](/secret-manager/concepts/#region) in which to recover the secret, in the **Region** drop-down.
+3. Click the **Scheduled for deletion** tab. Your secrets display.
+4. Click <Icon name="more" /> next to the secret you want to recover and click **Recover**. A pop-up displays the estimated cost of recovering the secret.
+    <Message type="note">
+     Recovering a secret is billed €0.01 per version associated with the secret.
+    </Message>
+5. Click **Recover secret** to confirm. Your secret displays in the **Secrets** tab.
+
+## How to recover several secrets
+
+1. Click **Secret Manager** in the **Security and Identity** section of the [Scaleway console](https://console.scaleway.com/) side menu.
+2. Select the [region](/secret-manager/concepts/#region) in which to recover the secret, in the **Region** drop-down.
+3. Click the **Scheduled for deletion** tab. Your secrets display.
+4. Tick the checkbox next to **Name** to select all the secrets you want to recover.
+5. Click the circular arrow to recover the selected secrets.
+6. Check the estimated cost and click **Recover secrets** to confirm.

pages/secret-manager/how-to/recover-version.mdx

@@ -0,0 +1,38 @@
+---
+meta:
+  title: How to recover a version scheduled for deletion
+  description: Recover a version scheduled for deletion in the Scaleway console before it is permanently removed.
+content:
+  h1: How to recover a version scheduled for deletion
+  paragraph: Recover a version scheduled for deletion in the Scaleway console before it is permanently removed.
+tags: secret sensitive-data scheduled-deletion recover-version
+dates:
+  validation: 2025-04-15
+  posted: 2025-04-15
+categories:
+  - identity-and-access-management
+---
+
+This page shows you how to recover a version scheduled for deletion using the Scaleway [console](https://console.scaleway.com). Once you schedule a version for deletion, it enters a 7-day pending deletion period, during which you can still recover it.
+After this retention period, the version is permanently deleted.
+
+<Message type="important">
+  Scheduled deletion deletes ephemeral secrets and their versions immediately.
+</Message>
+
+<Macro id="requirements" />
+
+- A Scaleway account logged into the [console](https://console.scaleway.com)
+- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization
+- Created a [version](/secret-manager/how-to/create-version/)
+- Scheduled a version for deletion
+
+1. Click **Secret Manager** in the **Security and Identity** section of the [Scaleway console](https://console.scaleway.com/) side menu.
+2. Select the [region](/secret-manager/concepts/#region) in which to recover the version, in the **Region** drop-down.
+3. Access the secret for which you want to recover the version. Your secret's **Overview** tab displays.
+4. Click the **Versions** tab.
+5. Click <Icon name="more" /> next to the version you want to recover, and click **Recover**. A pop-up displays the estimated cost of recovering the version.
+    <Message type="note">
+     Recovering a version is billed €0.01.
+    </Message>
+6. Click **Recover version** to confirm. You version displays in the **Versions** tab with the same status as before the scheduled deletion.