Recurring jobs with secrets

Protect passwords and other sensitive values with your own password when exporting a recurring job

A recurring job created from an action can hold secrets: values of action inputs whose type is password or encrypted text. When you export that job from Cloud Management Platform (CMP), you can encrypt those values with a password you choose. Importing the job prompts for the same password, which decrypts the secrets.

Why use a password

Setting your own password lets you move an exported job between CMP instances without exposing its secrets.

If you leave the prompt empty, CMP falls back to a default key. The export still works, but its secrets can only be decrypted by the same CMP instance that produced it, so the job cannot carry its secrets to another instance.