Crypto Tools for DevOps: Git-Crypt

Re:Crypto Tools for DevOps: Git-Crypt – Tozny by JoshTriplett on Monday April 10, 2017 @08:13PM (#14083719)

Then you need a different secret in the application: the key to the data in the S3 buckets.

Ultimately, you have to supply at least one secret to the application at runtime, and then it can bootstrap its way to others if needed.

[ Parent | on HN ]

Re:Crypto Tools for DevOps: Git-Crypt – Tozny by jonesetc on Monday April 10, 2017 @10:02PM (#14084294)

All you need are the same IAM secrets that you already needed for terraform. Keeping the state out of repos and in encrypted buckets is definitely the way to go.

[ Parent | on HN ]