Credentials Store
The Credentials Store provides a secure vault for storing authentication credentials used by Soracom platform services. When Beam, Funnel, Funk, or other services need to authenticate with external cloud providers, they reference credentials stored here rather than embedding secrets in device configurations.
What it does
- Secure storage: Store API keys, access tokens, certificates, and other credentials in an encrypted vault
- Service integration: Reference stored credentials from Beam, Funnel, Funk, and Krypton configurations
- Multiple credential types: Support AWS IAM roles, Azure connection strings, GCP service accounts, and generic API keys
- Access control: Limit credential access to specific SAM users and roles
- Audit trail: Track credential creation, updates, and usage through audit logs
Common use cases
- Storing AWS IAM credentials for Beam and Funnel cloud forwarding
- Managing TLS certificates for MQTT endpoint authentication
- Centralizing API keys used across multiple service configurations
Related
- Soracom Beam — Uses stored credentials for authenticated forwarding
- Soracom Funnel — References credentials for cloud adapter authentication
- SAM Users & Roles — Control who can manage credentials