Key Management System (KMS)

The Donutwork KMS is your SaaS's cryptographic vault. It provides a centralized system for storing sensitive credentials, application secrets, and master keys that should never be hard-coded or stored in plain text.

Key Structure

Each KMS entry is designed for programmatic access and high security:

• Handler: A unique alias used by your APIs or scripts to retrieve the key without exposing its actual content.
• Content: The secret value (e.g., Stripe Secret Key, AWS Access Key, or a private certificate).
• Whitelist (Network Isolation): Restrict key usage to specific IP addresses or CIDR ranges. If a request comes from an unauthorized IP, the KMS will block access even with valid credentials.

Security Auditing

Traceability is built into the core of the KMS. Every time a key is read or modified, an Audit Log is generated.

Audit Log Details:

• Requester Identity: Who accessed the key.
• Timestamp: Exactly when the access occurred.
• Source IP: The network origin of the request.
• Outcome: Whether the request was successful or blocked by the whitelist policy.