# Attach Secrets

{% hint style="info" %}
Secrets must exist first, see section [Configuration/Secret](https://dbi-services.gitbook.io/yak-user-doc/configuration/manage-secrets) for more details
{% endhint %}

Once your infrastructure has been properly declared, you need to attach secrets to operate your instances securely.

1. Navigate to the **Infrastructures** menu
2. Select the infrastructure previously created from the list
3. Click **"Actions"** -> **"Attach Secret"**
4. Select a secret from the list in the pop-up box (a secret must exist first)
5. Click **"Attach"**
6. Repeat the same procedure if additional secrets need to be attached to this infrastructure

You will need a minimum of 2 secrets types for **cloud setups**:

* Your cloud provider credentials, to deploy to your favorite cloud ([AWS](#aws), [Azure](#azure), [OCI](#oci))
* A [SSH key](#ssh-key) (For Linux servers) or a [WinRM certificate](#winrm) (For Windows servers), to connect to your instances once deployed.

**On-premises configuration** only requires [SSH key](#ssh-key) (For Linux servers) or a [WinRM certificate](#winrm) (For Windows servers)