News for hackers. Stuff that matters.
Re:Strongbox: a secret manager for AWS by stiankri on Monday November 27, 2017 @09:23AM (#15787515)
I'm the creator of Strongbox. Feel free to ask me technical questions about the project.
Re:Strongbox: a secret manager for AWS by danieka on Monday November 27, 2017 @09:32AM (#15787579)
Thanks for sharing and gj, nice to see Schibsted contributing to open-source :)
Re:Strongbox: a secret manager for AWS by Lunatic666 on Monday November 27, 2017 @10:09AM (#15787849)
Including the Spring-Cloud config server would have been interesting , because it has all the mentioned features, but is running on top of git. If you are on AWS, you can use one if the free CodeCommit repos.

The cool thing is obviously the spring integration, which pulls the secrets on app startup and overwrites or augments the values in the application.(properties|yml)

It can also run kind of serverless by embedding it in your app.

Re:Strongbox: a secret manager for AWS by emil_va on Monday November 27, 2017 @10:13AM (#15787883)
Yeah, we have the same features with the strongbox-spring-boot-starter, it injects all secrets as properties on application bootstrap: https://github.com/schibsted/strongbox/blob/master/spring-bo...
Re:Strongbox: a secret manager for AWS by dotemacs on Monday November 27, 2017 @09:36AM (#15787601)
Thanks, your project looks useful

Here are some questions:

Are you using Strongbox in production?

The backup is mentioned, but how exactly do you backup?

Thanks

Re:Strongbox: a secret manager for AWS by stiankri on Monday November 27, 2017 @09:44AM (#15787672)
The project has been used in production since the summer of 2016. It is being used by a number of teams, and has been contributed to by more than 20 developers (there is a CONTRIBUTORS file).

The backup will take the data stored in DynamoDB (or a file) and serialize to an encrypted file. It will not backup the KMS key, or IAM policies. Hence, it is useful to take snapshots of your state, but not a full disaster recovery.

You can take a backup by a click of a button in the GUI, or using the cli: `strongbox group backup --group team.project --dst-path my-file.backup`