News for hackers. Stuff that matters.

A comment on Confidant: an open-source secret management service.

Re:Confidant: an open-source secret management service by AndrewWright on Wednesday November 04, 2015 @03:17PM (#10509334)
Another alternative developed for AWS deployments, written in Python and uses KMS: Credstash https://github.com/fugue/credstash
[ Parent | on HN ]
Re:Confidant: an open-source secret management service by ryan_lane on Wednesday November 04, 2015 @03:23PM (#10509383)
The only downside of credstash is that it doesn't have the ability to restrict sets of credentials to different IAM roles. The access is all-or-nothing, per dynamo table.

Otherwise the general design of credstash is very similar to Confidant.

[ Parent | on HN ]
Re:Confidant: an open-source secret management service by vogan_mother on Thursday November 05, 2015 @12:35AM (#10511812)
It is possible to use fine grained access control with dynamodb in order to restrict access within a ddb table
[ Parent | on HN ]