As the modern data orchestration service, Astro has been built and deployed with security as a guiding architectural principle. This same principle extends into how your sensitive information and credentials are stored and secured. Astro offers a managed secrets backend for encryption and storage of secret environment variables, as well as integration with popular secrets management tools. For more information about how secret values are stored on Astro, see How environment variables are stored on Astro.
All secrets management configuration performed in the Cloud UI is securely transmitted and stored, is resilient to in-region cloud failures, and can be recovered in the case of a full control or data plane disaster.