Support External Enterprise Credential Management Integration

Many organizations use centralized enterprise credential management solutions to securely manage, rotate, audit, and govern credentials across their technology landscape. Currently, external credential management integration is not supported, resulting in credentials being managed separately within the platform and creating additional operational and security overhead.

I propose support for integration with external credential management solutions such as:

• AWS Secrets Manager
• CyberArk
• HashiCorp Vault
• Azure Key Vault

This would allow connections, data sources, and platform services to retrieve credentials dynamically from approved enterprise credential stores rather than requiring credentials to be maintained directly within the platform.

Benefits:

• Improved security posture through centralized credential management.
• Reduced duplication of credentials across systems.
• Automatic credential rotation without manual platform updates.
• Enhanced compliance and auditability.
• Alignment with enterprise security and governance standards.
• Reduced operational effort for platform administrators and application teams.

How it should work:

• Allow administrators to configure trusted external credential providers.
• Enable connections and integrations to reference secrets stored in external vaults.
• Support dynamic credential retrieval during runtime.
• Support credential rotation without requiring connection reconfiguration.
• Provide role-based access controls and auditing for secret access.
• Support policy-driven management across projects and environments.

Current Limitation / Use Case
Since External Credential-store integration is not presently supported. This creates challenges for organizations that have standardized on enterprise credential management platforms such as AWS Secrets Manager or CyberArk and require all application credentials to be centrally managed. Adding native integration would improve security, simplify administration, and better align the platform with enterprise operational standards.

Note: Our preference is to deliver CyberArk solution or AWS Credential Store followed by other solutions.