Secrets and certificates

One expiry calendar for app secrets, Key Vault, ACM, Secrets Manager, Google Secret Manager and public TLS endpoints.

Updated 29 October 2026

Online version, always current: https://cloudvision360.com/docs/cloudvision360/secrets-and-certificates/

An expired secret or certificate causes outages that are entirely avoidable. CloudVision360 gives you one calendar for all of them.

One calendar, every source

Expiry tracking spans:

  • Entra app secrets and certificates
  • Azure Key Vault
  • AWS Certificate Manager and Secrets Manager
  • Google Secret Manager
  • Your public TLS endpoints

Each item shows its owner, lead time and the steps to replace it, so a renewal starts before it is urgent.

CloudVision360 Secrets and certificates page
One expiry calendar for app secrets, Key Vault, ACM, Secrets Manager, Google Secret Manager and public TLS endpoints.

Values are never read

CloudVision360 tracks that a secret or certificate exists and when it expires. It never reads the secret value — only metadata needed to warn you in time.

Warnings

Upcoming expiries raise warnings through your notification channels with enough lead time to rotate safely, and appear as findings so they compete for attention on the Fix first list.

Use it

Open Security → Secrets & certificates for the calendar view, assign owners, and filter by source or by time to expiry.