Skip to content
Closed
Show file tree
Hide file tree
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions menu/navigation.json
Original file line number Diff line number Diff line change
Expand Up @@ -555,6 +555,10 @@
"label": "Delete a secret",
"slug": "delete-secret"
},
{
"label": "Recover secrets scheduled for deletion",
"slug": "recover-secrets"
},
{
"label": "Delete a version",
"slug": "delete-version"
Expand Down
11 changes: 10 additions & 1 deletion pages/secret-manager/concepts.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ content:
paragraph: Discover essential concepts of Scaleway Secret Manager, including secret versioning, ephemeral policies, and path management.
tags: secret-manager secret version
dates:
validation: 2025-01-13
validation: 2025-03-19
---

## Disabling a version
Expand Down Expand Up @@ -109,6 +109,15 @@ Secret types refer to the different kinds of sensitive data you can store with S

Upon secret creation, you must choose a secret type that will also be applied to the secret version. All the secret's subsequent versions must be of the same type.

## Scheduled deletion

Scheduled deletion lets you mark a secret and its versions for deletion ahead of time. Instead of immediate deletion, the secret enters a 7 day pending deletion period, during which you can still recover it. During this time, you can read secret versions but cannot edit, access, or delete them. After the retention period, the secret and all its versions are permanently deleted.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Scheduled deletion lets you mark a secret and its versions for deletion ahead of time. Instead of immediate deletion, the secret enters a 7 day pending deletion period, during which you can still recover it. During this time, you can read secret versions but cannot edit, access, or delete them. After the retention period, the secret and all its versions are permanently deleted.
Scheduled deletion lets you mark a secret and its versions for deletion ahead of time. Instead of immediate deletion, the secret enters a 7-day pending deletion period, during which you can still recover it. During this time, you can read secret versions but cannot edit, access, or delete them. After the retention period, the secret and all its versions are permanently deleted.


Recovering your secrets is billed €0.01 per version associated with the secret.

Ephemeral secrets are deleted immediately when scheduled for deletion.


## Tag

Tags allow you to organize your secrets. This gives you the possibility of sorting and filtering your secrets in any organizational pattern of your choice, which in turn helps you arrange, control, and monitor your secrets.
Expand Down
11 changes: 6 additions & 5 deletions pages/secret-manager/how-to/delete-secret.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -7,13 +7,13 @@ content:
paragraph: Discover how to securely delete secrets using Scaleway's intuitive console. Follow these steps to manage your sensitive data effectively.
tags: secret sensitive-data storage-system
dates:
validation: 2025-03-14
validation: 2025-03-19
posted: 2023-02-21
categories:
- identity-and-access-management
---

This page explains how to delete a [secret](/secret-manager/concepts/#secret) using the [Scaleway console](https://console.scaleway.com). You **cannot delete protected secrets**, i.e. secrets to which you have applied [secret protection](/secret-manager/concepts/#secret-protection).
This page explains how to [schedule secret deletion](/secret-manager/concepts/#scheduled-deletion) using the [Scaleway console](https://console.scaleway.com). You **cannot delete protected secrets**, i.e. secrets to which you have applied [secret protection](/secret-manager/concepts/#secret-protection).

<Macro id="requirements" />

Expand All @@ -25,13 +25,14 @@ This page explains how to delete a [secret](/secret-manager/concepts/#secret) us

1. Click **Secret Manager** in the **Security and Identity** section of the [Scaleway console](https://console.scaleway.com/) side menu.
2. Select the [region](/secret-manager/concepts/#region) in which to delete the secret, in the **Region** drop-down.
3. Access the secret you wish to delete. The secret's **Overview** tab displays.
4. Scroll down and click **Delete secret**. A pop-up displays.
5. Type **DELETE** and click **Delete secret**.
3. Click <Icon name="more" /> next to the secret you want to delete and click **Delete**. A pop-up displays informing you that the action schedules the deletion of your secret and its version.
4. Type **DELETE** and click **Delete secret** to confirm. Your secret displays in the **Scheduled for deletion** tab for a period of 7 days before being permanently deleted.

<Message type="important">
- Although you cannot delete a [protected secret](/secret-manager/concepts/#secret-protection), you can delete its versions
- Deleting a secret is a permanent action. It erases every version you have created for your secret
- Scheduled deletion does not delete your secret immediately unless it is an ephemeral secret. [Find out how to recover secrets scheduled for deletion](/secret-manager/how-to/recover-secrets/).
</Message>



38 changes: 38 additions & 0 deletions pages/secret-manager/how-to/recover-secrets.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,38 @@
---
meta:
title: How to recover secrets scheduled for deletion
description: Discover how to securely delete secrets using the Scaleway console. Follow these steps to manage your sensitive data effectively.
content:
h1: How to recover secrets scheduled for deletion
paragraph: Discover how to securely delete secrets using Scaleway's intuitive console. Follow these steps to manage your sensitive data effectively.
tags: secret sensitive-data scheduled-deletion recover-secret
dates:
validation: 2025-03-19
posted: 2025-03-19
categories:
- identity-and-access-management
---

This page shows you how to recover secrets scheduled for deletion using the Scaleway console. Once you schedule a secret for deletion, it enters a 7 day pending deletion period, during which you can still recover it.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
This page shows you how to recover secrets scheduled for deletion using the Scaleway console. Once you schedule a secret for deletion, it enters a 7 day pending deletion period, during which you can still recover it.
This page shows you how to recover secrets scheduled for deletion using the Scaleway console. Once you schedule a secret for deletion, it enters a 7-day pending deletion period, during which you can still recover it.

After this retention period, the secret and all its versions are permanently deleted.

<Message type="important">
Scheduled deletion deletes ephemeral secrets and their versions immediately
</Message>

<Macro id="requirements" />

- A Scaleway account logged into the [console](https://console.scaleway.com)
- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization
- [Generated an API key](/iam/how-to/create-api-keys/) and enabled the `SecretManagerFullAccess` [permission set](/iam/reference-content/permission-sets/)
- Created a [secret](/secret-manager/how-to/create-secret/)
- Scheduled secrets for deletion

1. Click **Secret Manager** in the **Security and Identity** section of the [Scaleway console](https://console.scaleway.com/) side menu.
2. Select the [region](/secret-manager/concepts/#region) in which to recover the secret, in the **Region** drop-down.
3. Click the **Scheduled for deletion** tab. Your secrets dispaly.
4. Click <Icon name="more" /> next to the secret you want to recover and click **Recover**. A pop-up displays with the estimated cost for recovering the secret.
<Message type="note">
Recovering a secret is billed €0.01 per version associated with the secret
</Message>
5. Click **Recover secret** to confirm. Your secret displays in the **Secrets** tab.
Loading