[Yandex Cloud documentation](../../index.md) > [Yandex MetaData Hub](../index.md) > Connection Manager > Concepts > Secret

# Secret



A secret is a set of versions that store the connection's secure data. A version contains sets of _keys_ and _values_. A key is a non-secret name that identifies a value. A value is secret information about a connection.
You can set up access to secrets using [Yandex Identity and Access Management](../../iam/index.md). The roles available for different use cases are described in the [Access management in Yandex MetaData Hub](../security/index.md) section.

Secrets are stored in [Yandex Lockbox](../../lockbox/index.md). To see which secrets store the connection information, select **Lockbox** in the list of services in your directory. The **Secrets** page will list the secrets whose names match the [connection IDs](../operations/update-connection.md#list-connections).

You can set up access to versions of a secret in addition to access to the secret itself. To do this, you need to assign the `lockbox.admin` or `lockbox.payloadViewer` role. For more information about managing access, see [Yandex Lockbox access management: What roles do I need](../security/connection-manager-roles.md#choosing-roles).

By default, the secrets are created in the same folder with the connections. To create a secret in a different folder, specify the ID of the folder for the secret in the relevant API, YC CLI, or Terraform parameter when [creating the connection](../operations/create-connection.md). The connection and secret folders must be in the same cloud. Once the connection is created, you cannot change the folder for the secret.