AWS Secrets Manager Reviews and details

Social recommendations and mentions

• Building a WhatsApp generative AI assistant with Amazon Bedrock and Python

  Edit WhatsApp configuration values in Facebook Developer in AWS Secrets Manager console. - Source: dev.to / about 2 months ago

• Keeping secrets out of public repositories

  If you’re asking yourself where you should be keeping secrets, you should be using a secrets manager. Two examples include Doppler (https://doppler.com). - Source: Hacker News / 2 months ago

• Command Line Interface Guidelines

  A secrets management service would be most convenient. Documentation makes them easy to set up without having to build anything extra yourself. A secrets manager like Doppler (https://Doppler.com) has the advantage of protecting your secrets in a secure place and the advantage of minimizing exposure of those secrets - even to your own developers. That way, you don't end up with a data breach that could have easily... - Source: Hacker News / 3 months ago

• A mistakenly published password exposed Mercedes-Benz source code

  It seems like they made a lot of assumptions that something like this wouldn't happen. They assumed employees would never leak secret information, and that their GitHub repos would never be exposed. They could've used https://doppler.com) and never had this problem. It's a little too easy to get comfortable thinking things work well the way they are. This should be a warning to other companies to seriously... - Source: Hacker News / 3 months ago

• Kubernetes Secret Management

  AWS Secrets Manager is a fully managed service that simplifies the storage and retrieval of secrets within the AWS ecosystem. It integrates seamlessly with Kubernetes deployments, providing a scalable and secure solution for secret management. - Source: dev.to / 4 months ago

• Refactoring a serverless application to use Step Functions third-party API call integration

  So we create a connection first and specify authorization pattern, which is API key in this case. EventBridge Connections uses Secrets Manager to store the key. - Source: dev.to / 5 months ago

• A beginner's guide to AWS Best Practices

  AWS gives two sensible options - Systems Manager Parameter Store or AWS Secrets Manager. There are pros and cons to both options, but understand that Parameter Store is just as secure as Secrets Manager, provided you use the SecureString\ parameter type. More info here. - Source: dev.to / 5 months ago

• Deploy Secure Spring Boot Microservices on Amazon EKS Using Terraform and Kubernetes

  If you have noticed, you are setting secrets in plain text on the application-configmap.yml file, which is not ideal and is not a best practice for security. The best way to do this securely would be to use AWS Secrets Manager, an external service like HashiCorp Vault, or Sealed Secrets. To learn more about these methods see the blog post Shhhh... Kubernetes Secrets Are Not Really Secret!. - Source: dev.to / 5 months ago

• Secure GitHub Actions by pull_request_target

  In this post, I described how to build secure GitHub Actions workflows by pull_request_target event instead of pull_request event. Using pull_request_target, you can prevent malicious codes from being executed in CI. And by managing secrets in secrets management services such as AWS Secrets Manager and Google Secret Manager and access them via OIDC, you can restrict the access to secrets securely. To migrate... - Source: dev.to / 6 months ago

• The Complete Microservices Guide

  Secret Management: Securely stores sensitive configuration data and secrets using tools like AWS Secrets Manager or HashiCorp Vault. Avoid hardcoding secrets in code or configuration files. - Source: dev.to / 7 months ago

• How to Write Impeccably Clean Code That Will Save Your Sanity

  Do not add secrets into your repository. Instead use an environment file or a Secrets Management Service like AWS Secrets Manager. - Source: dev.to / 10 months ago

• Programmatically retrieving secrets from Parameter Store and Secrets Manager

  So we are better off adding the secrets to a central place like Parameter Store or Secrets Manager. - Source: dev.to / 9 months ago

• Cloud Test Automation on AWS: The Role of QA Engineers

  Security and secrets management - Experience with tools like AWS Secrets Manager, AWS Key Management Service (KMS), AWS Web Application Firewall (WAF) for secure secrets management and overall system security adds an extra layer of expertise to the QA Engineer's skill set. - Source: dev.to / 10 months ago

• How To Manage Secrets In Terraform Like A Pro

  AWS Secrets Manager is a cloud service offered by AWS which can help to securely manage, retrieve, and rotate database credentials, API keys, and other secrets throughout their lifecycles. - Source: dev.to / 12 months ago

• How Do I Actually Use Docker?

  You can probably use GitHub secrets, yes. Depending on your deployment flow there could be other solutions: check out doppler maybe, maybe you can use ansible or similar automation tool, maybe you can use a secret manager like AWS or similar. Source: about 1 year ago

• Developers Journey to AWS Lambda

  Environment Variables are familiar to most developers and work identically between your local machine and AWS. But for anything secure, or that needs to be used across multiple Lambda functions, it's worth checking out AWS Systems Manager Parameter Store, AWS Secrets Manager, or AWS AppConfig. It removes many future headaches, and helps your security team sleep at night. - Source: dev.to / about 1 year ago

• How to assume an IAM role to access another AWS account

  Sometimes you need to access something from a different AWS account. It is called cross account access. For example, you may want to get a secret from the secrets manager. By default, it is not possible, but AWS comes with a solution. You can assume the role that has permission to the actions you want to do. Once you do this, you can act on the other account. - Source: dev.to / about 1 year ago

• The Old Faithful: Why SSM Parameter Store still reigns over Secrets Manager

  Managing and securing application secrets is a crucial part of any cloud-native application. AWS offers two primary services: the Systems Manager (SSM) Parameter Store and the more recent Secrets Manager. - Source: dev.to / about 1 year ago

• How to Deploy and Scale Strapi on a Kubernetes Cluster 1/2

  Store the Secrets in a vault like Hashicorp Vault, AWS Secrets Manager, GCP Secret Manager, etc., and then use an operator like External Secrets Operator to add them to your K8s cluster. - Source: dev.to / about 1 year ago

• DevSecOps with AWS- Integrate Azure DevOps for CDK deployments Part-1

  AWS Secrets Manager: a secrets management service that helps you protect access to your applications, services, and IT resources. This service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. - Source: dev.to / over 1 year ago

• Deploying Next.js 13 with Amplify CDK

  To store the token in AWS, we recommend to use the AWS Secret Manager service. Be careful to choose a plain text secret (in the AWS console select "Store a new secret", "Other type of secret" and finally "Plaintext"). Choose a key name that matches the key used in the GitHubSourceCodeProvider construct (GITHUB_TOKEN_KEY in this example). - Source: dev.to / over 1 year ago