You work for a healthcare company and regulations require you to create all resources in...

To control data residency in Secret Manager, you must use a user-managed replication policy to specify that secrets reside in U.S. regions, satisfying healthcare compliance requirements (e.g., HIPAA, regional residency).

“To ensure that secrets are stored only in certain regions, use user-managed replication.”

— Secret Manager Replication Policies

“If an organization policy restricts the use of the global location, use a user-managed replication policy to comply with those restrictions.”

— Policy Restrictions on Global Resources

Using user-managed replication allows you to explicitly define U.S. regions while resolving the policy block.