Identity & security

Akka-native secret management

Akka provides built-in secret management at the project level. Secrets are injected as environment variables into your services, supporting:

  • Generic secrets (key-value pairs)

  • Symmetric and asymmetric encryption keys

  • TLS certificates and CA bundles

  • Key rotation without environment variable changes

Secret values are never exposed in the CLI or Console.

See Manage secrets for configuration details.

External secret providers

Azure KeyVault

Azure KeyVault integration is built in. See Manage external secrets for setup instructions.

Other providers

Connect to any secret provider with a Java client library:

  • AWS Secrets Manager — via the AWS SDK for Java

  • GCP Secret Manager — via the Google Cloud Client Libraries for Java

  • HashiCorp Vault — via the Vault Java Driver