Serverless applications and cloud functions often need to communicate with an upstream API or service. This post describes common patterns and approaches for managing secrets in serverless such as encrypted environment variables, IAM, and Google Cloud Storage.