State reference - epam/hubctl GitHub Wiki
Hub CLI writes state as YAML into hub.yaml.state
file compressed (by default) and encrypted (when writing to remote object storage).
S3, GCS, and Azure Storage are supported. A static password, AWS KMS key, or Azure Key Vault key could be used to encrypt the state. The encryption is AES256 GCM.