For AI agents: a documentation index is available at the root level at /llms.txt and /llms-full.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
Logo
DeveloperAcademyCommunityStatus
ReferenceGuides
ReferenceGuides
  • Agent Studio
    • Overview
    • Quickstart Guides
    • Core Concepts
    • Conversation Process
    • Actions
    • Connectors
    • System Triggers
    • Agent Architect
    • Cookbooks
    • Development and Testing
    • AI Agent Marketplace
    • Developer Tools
  • Agentic AI
    • LLM Fundamentals
    • The Agentic Reasoning Engine
    • Memory Constructs
    • Conversational Context
    • Guardrails
    • Grounding and Hallucinations
    • Continuous Learning
    • LLMs & SLMs
    • Steerability Tools
    • Multilingual Support
  • Core Platform
    • User Identity
    • Moveworks Agent (On-Prem)
      • On-Prem Agent Installation Guide
      • On-Prem Agent Quickstart
      • On-Prem Agent Configuration Guides
        • On-Prem Agent Configuration Reference
        • On-Prem Agent Configuration Examples
        • On-Prem Agent Secrets Management
        • On-Prem Agent AWS Secrets Manager
        • On-Prem Agent Azure Key Vault
        • Reconfiguring an Existing Agent
        • Upgrading an Existing Agent Version
      • On-Prem Agent Operations and Health
      • On-Prem Agent Troubleshooting
      • On-Prem Agent Container Image Management
    • Approvals Engine
    • Entity Catalog
    • Moveworks Data Objects
    • Security Information and Event Management (SIEM) Logs Overview
DeveloperAcademyCommunityStatus
Core PlatformMoveworks Agent (On-Prem)On-Prem Agent Configuration Guides

On-Prem Agent Secrets Management

||View as Markdown|
Was this page helpful?
Edit this page
Previous

On-Prem Agent AWS Secrets Manager

Next
Built with

By default, the Moveworks On-Prem Agent stores service account credentials encrypted locally on the server (AES-256 encryption at rest).

The agent can also be configured to fetch credentials at runtime from an external secrets manager. This allows your organization to centralize credential management and rotate secrets without touching the agent config directly.

Supported platforms:

  • AWS Secrets Manager — configure IAM permissions and store secrets under the moveworks_agent/* path
  • Azure Key Vault — configure a managed identity on the agent VM and grant Key Vault Secrets User access