# Universal Secrets Sync

<figure><img src="/files/7uWS367vzxNzn62q0WlA" alt=""><figcaption></figcaption></figure>

## What is Keeper Universal Secrets Sync? <a href="#pdf-page-dqtjnnk6pra4mfdizdco-what-is-keeper-discovery" id="pdf-page-dqtjnnk6pra4mfdizdco-what-is-keeper-discovery"></a>

Universal Secrets Sync (USS) enables automatic synchronization of secrets from Keeper Secrets Manager folders to cloud provider secret management services:

* **AWS Secrets Manager** - Multi-region replication
* **Azure Key Vault** - Auto-creation with hybrid permissions
* **Google Cloud Secret Manager** - Automatic cross-zone replication

{% hint style="info" %}
Universal Secrets Sync goes live in **May 2026**
{% endhint %}

## Features of Universal Secrets Sync <a href="#pdf-page-dqtjnnk6pra4mfdizdco-features-of-keeper-discovery" id="pdf-page-dqtjnnk6pra4mfdizdco-features-of-keeper-discovery"></a>

Keeper USS is part of the Zero-Trust KeeperPAM Platform. Keeper USS has the following features:

* Perform a sync of the records contained in one or more shared folders to the cloud
* Configure automatic sync operation to be performed if record content changes OR
* Configure manual sync operation to present list of secrets to be created/updated in dry-run--sync operation can then be approved or denied
* Specify an optional role that the Keeper Gateway will use to perform its secret sync operations.

#### Key Features <a href="#key-features" id="key-features"></a>

* **Multi-folder sync** - Sync from multiple Keeper folders
* **Multi-region** - AWS syncs across all configured regions
* **Auto-creation** - Azure creates vaults automatically
* **Metadata/Tags** - Content type and source tracking
* **Dry-run mode** - Test without making changes
* **Error recovery** - Handles missing secrets, permission issues

## How to use Universal Secrets Sync

USS can be managed through the Keeper Commander CLI and the Vault UI.

* [Universal Secrets Sync Basics](/keeperpam/privileged-access-manager/universal-secrets-sync/discovery-basics.md)
* [Universal Secrets Sync using Commander](/keeperpam/privileged-access-manager/universal-secrets-sync/discovery-using-commander.md)
* [Universal Secrets Sync using the Vault](/keeperpam/privileged-access-manager/universal-secrets-sync/discovery-using-the-vault.md)

The next section covers the basics on performing secrets sync with KeeperPAM.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.keeper.io/keeperpam/privileged-access-manager/universal-secrets-sync.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.