Plugin to use internal secret management service to handle Jenkins credentials

Jenkins setup: Jenkins is setup on EKS with kuberenetes as cloud agent

I am new to plugin development so please bear with me.

We have a internal secret management tool and i need to move away from default jenkins credentials to use this as per security we can not store credentials in xml . I did checked few things like vault plugin but it doesnt support write operation and i get maybe we need to overwrite FolderCredentialsProvider and SystemCredentialsProvider in-order to support write operation

So my question is can i build plugin for String and usernamePassword type based credentials to create and manage credentials on internal secret API? And how can i do that ? how do i skip writing to xml and if i update the credentials then how it will call the function to write to API

Any guidance would be helpful

Have you read credentials-plugin/docs/implementation.adoc at 831096eb553450632960a7c5c90f4320526ced81 · jenkinsci/credentials-plugin · GitHub

No I haven’t read , I will read it first and ask again if anything
Thanks