Secret Providers

Note: This feature is available in Lite, Enterprise, Ultimate and Team editions only.

DBeaver supports cloud-based secret providers from AWS Secrets Manager and HashiCorp Vault.

Before configuring a secret provider in DBeaver, ensure that:

• AWS Secrets Manager or HashiCorp Vault is set up.

• You have the necessary access permissions.

1. Open Window -> Preferences -> Connections -> Secret providers.
2. Click Add.
3. Select a provider from the dropdown menu and click OK.

1. Fill in the required fields.

   Field	Description
   Name	Identifier for the secret configuration in DBeaver.
   Cloud	AWS configuration settings. For more details on configuring AWS Cloud in DBeaver, see AWS Cloud Explorer.
   Region	AWS region where secrets are stored.

2. Click OK and Apply and Close to save the configuration.

1. Fill in the required fields.

   Field	Description
   Name	Identifier for the secret configuration in DBeaver.
   Server	URL of the Vault server used to retrieve secrets.
   Token	Authentication token required to access the Vault server.

2. Click OK and Apply and Close to save the configuration.

3. Import certificate if required.

1. Start creating a connection

2. In the Create Connection wizard, go to the Main tab, choose secret provider configuration and enter the secret name in the Secret parameters field.

   The secret name must match the name stored in AWS Secrets Manager or HashiCorp Vault:

   • For Vault, use the following format secret/your_secret_name.
   • For AWS, use your_secret_name.

3. If the secret doesn’t include all required details (such as the host or port), enter them manually in the connection settings.

4. Click the Test Connection button to verify your settings. If configured correctly, DBeaver will establish a connection using the Secret Provider.
5. Click Finish to save the connection.