--- title: "API7 Enterprise v3.2.16: Integrated Secret Providers - API7.ai" description: "API7 Enterprise v3.2.16 seamlessly integrates with secret providers like HashiCorp Vault, enabling effortless management and referencing of external sensitive information." url: "https://api7.ai/blog/api7-3.2.16-integrated-secret-providers" --- [Blog](https://api7.ai/blog) [Products](https://api7.ai/category/products)[Technology](https://api7.ai/category/technology)[Ecosystem](https://api7.ai/category/ecosystem)[Case Study](https://api7.ai/category/usercase)[Team & Community](https://api7.ai/category/community) Search ⌘ + K [Blog](https://api7.ai/blog) Products # API7 Enterprise v3.2.16: Integrated Secret Providers [![Zhihuang Lin](https://github.com/oil-oil.png)](https://github.com/oil-oil) [Zhihuang Lin](https://github.com/oil-oil) October 10, 2024 [Products](https://api7.ai/category/products) In [API7 Enterprise](https://api7.ai/enterprise), you may store a large amount of sensitive information, such as SSL certificates and private keys, usernames and passwords of consumer authentication credentials, and that required by certain plugins to connect to external systems. The concept of "Secret Providers" is introduced in API7 Enterprise v3.2.16. Now, we can easily add secret provider resources to integrate with third-party secret managers, such as [HashiCorp Vault](https://www.hashicorp.com/products/vault), [AWS Secrets Manager](https://aws.amazon.com/secrets-manager/?nc1=h_ls), and [GCP Secret Manager](https://cloud.google.com/security/products/secret-manager?hl=en), and reference the sensitive information stored externally in API7 using variables. The reference format is as follows: ``` $secret://$manager/$id/$secret_name/$key ``` ## How to Use Secret Providers? ### Adding a Secret Provider In the Gateway Group menu, a new "Secret Provider" option is added. Click the button to access the secret provider list page. Then, click the "Add Secret Provider" button in the top right corner of the page. ![Add Secret Providers in API7 Enterprise](https://static.api7.ai/uploads/2024/09/29/xQfH8Gc2_api7-3.2.16-secret-providers-1.PNG?imageMogr2/format/webp) In the pop-up window, fill in the basic information about the secret provider, select the secret management service type, for example, HashiCorp Vault. Then provide the service access address and authentication token for your HashiCorp Vault configuration. ### Viewing a Secret Provider After creation, we can view the specific configuration details and the secret variable example on the secret provider details page. ![Secret Provider Details in API7 Enterprise](https://static.api7.ai/uploads/2024/09/29/nilYDRYL_api7-3.2.16-secret-providers-2.PNG?imageMogr2/format/webp) The format of the secret variable is: `secret://manager/$id/$secret_name/$key`, with the following meanings: - **$secret**: A fixed prefix, no replacement needed - **$manager**: The secret management service - **$id**: The ID of the secret provider resource - **$secret\_name**: The name of the secret in the secret management service - **$key**: The key corresponding to the secret in the secret management service For example, with a secret provider ID of `my-provider` and a secret management service type of HashiCorp Vault, if you want to reference a secret named `my-secret` with a key `password`, the corresponding secret variable would be: ``` $secret://vault/my-hashicorp-vault/my-secret/password ``` Currently, HashiCorp Vault is supported as a secret management service. AWS Secrets Manager and GCP Secret Manager will soon be available. ### Referencing a Secret Variable Once the secret provider is created, you can reference externally stored sensitive information in various resources in API7 Enterprise through variables. For example, when adding [Basic Authentication](https://docs.api7.ai/hub/basic-auth) credentials for a consumer, you can choose to store sensitive information, like passwords, in an external secret management service and reference it in API7 Enterprise, thus enhancing security. ![Reference Secret Providers in API7 Enterprise](https://static.api7.ai/uploads/2024/10/09/CnZgk9ID_secret-3.PNG?imageMogr2/format/webp) Similarly, when working with non-form pages, like the plugin editor, we can also directly enter the value of the Secret variable as a string into any field that supports referencing Secrets. ![Refer Secret Information When Enabling Plugins](https://static.api7.ai/uploads/2024/09/29/1yuN0v6x_api7-3.2.16-secret-providers-4.png?imageMogr2/format/webp) ### Viewing Reference Relationships When we reference a variable from `my-provider` in consumer credentials, we can view this reference relationship in the secret provider reference list. Other referenced resources will also be displayed in this list, making it easier to track the usage of the secret provider. ![Secret Provider References](https://static.api7.ai/uploads/2024/09/29/2DqjZxKw_api7-3.2.16-secret-providers-5.png?imageMogr2/format/webp) ### Editing or Deleting a Secret Provider When editing or deleting a secret provider, the system will check the reference relationships to avoid invalid variables being referenced in resources, which could lead to configuration errors. ![Edit or Delete Secret Provider in API7 Enterprise](https://static.api7.ai/uploads/2024/09/29/LzGGyqbe_api7-3.2.16-secret-providers-6.png?imageMogr2/format/webp) ## Summary By integrating with external secret management services, such as HashiCorp Vault, API7 Enterprise enhances the convenience of referencing externally stored sensitive information across various resources. This integration reduces the risks and costs associated with manual management of such information. Looking ahead, we plan to support more types of secret management services to meet the growing needs of users, ensuring both flexibility and security in the management of sensitive information. Tags: [API Security](https://api7.ai/tags/api-security) [Data Security](https://api7.ai/tags/data-security) [API7 Enterprise](https://api7.ai/tags/api7-enterprise) Share article link Share Related Posts [![What's New in API7 Enterprise 3.2.2: Audit Logging](https://static.api7.ai/uploads/2024/12/25/0VzxmDj3_api7-audit-logging.png)](https://api7.ai/blog/api7-3.2.2-audit-logging) ## [What's New in API7 Enterprise 3.2.2: Audit Logging](https://api7.ai/blog/api7-3.2.2-audit-logging) [![Fortify Your Data Security: API7 Enterprise with FIPS Integration](https://static.api7.ai/uploads/2024/01/23/ABu3lkvZ_fips.png)](https://api7.ai/blog/api7-enterprise-fips) ## [Fortify Your Data Security: API7 Enterprise with FIPS Integration](https://api7.ai/blog/api7-enterprise-fips) Table of Contents - [How to Use Secret Providers?](#how-to-use-secret-providers) - [Adding a Secret Provider](#adding-a-secret-provider) - [Viewing a Secret Provider](#viewing-a-secret-provider) - [Referencing a Secret Variable](#referencing-a-secret-variable) - [Viewing Reference Relationships](#viewing-reference-relationships) - [Editing or Deleting a Secret Provider](#editing-or-deleting-a-secret-provider) - [Summary](#summary) ## Related Posts [![API7 Enterprise v3.2.16.3 Integrates with AWS Secrets Manager](https://static.api7.ai/uploads/2025/02/13/nrkyTz2U_3.2.16.3-aws-secrets-manager.png)](https://api7.ai/blog/api7-3.2.16.3-supports-aws-secrets-manager) Products November 7, 2024 #### [API7 Enterprise v3.2.16.3 Integrates with AWS Secrets Manager](https://api7.ai/blog/api7-3.2.16.3-supports-aws-secrets-manager) API7 Enterprise v3.2.16.3 integrates with AWS Secrets Manager for secure, efficient management and protection of sensitive data. [API Security](https://api7.ai/tags/api-security) [Data Security](https://api7.ai/tags/data-security) [API7 Enterprise](https://api7.ai/tags/api7-enterprise) [![API7 Enterprise 3.10.0: Simpler Service Management, Stronger Security, and Better AI Traffic Reliability](https://static.api7.ai/uploads/2026/07/06/e8rTH3tK_api7-enterprise-3.10.webp)](https://api7.ai/blog/api7-enterprise-3-10-service-management-security-ai-reliability) Products June 1, 2026 #### [API7 Enterprise 3.10.0: Simpler Service Management, Stronger Security, and Better AI Traffic Reliability](https://api7.ai/blog/api7-enterprise-3-10-service-management-security-ai-reliability) API7 Enterprise 3.10.0 simplifies service management, strengthens security defaults, and improves AI traffic reliability for platform teams. [API7 Gateway](https://api7.ai/tags/api7-gateway) [API7 Enterprise](https://api7.ai/tags/api7-enterprise) [AI Gateway](https://api7.ai/tags/ai-gateway) [![API7 Enterprise v3.2.16.4 Supports Webhook/Email Alert Notifications](https://static.api7.ai/uploads/2024/11/14/MZsGTMyQ_alert.png)](https://api7.ai/blog/api7-3.2.16.4-supports-email-webhook-alert-notification) Products November 14, 2024 #### [API7 Enterprise v3.2.16.4 Supports Webhook/Email Alert Notifications](https://api7.ai/blog/api7-3.2.16.4-supports-email-webhook-alert-notification) API7 Enterprise v3.2.16.4 enhances the alerting feature, supporting Webhook and Email notifications for timely updates. [API Security](https://api7.ai/tags/api-security) [API7 Enterprise](https://api7.ai/tags/api7-enterprise)