News for hackers. Stuff that matters.

A comment on AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely. Parent comment

Re:AWS Secrets Manager – Store, Distribute, and Rotate Crede... by januszeal on Wednesday April 04, 2018 @03:38PM (#16758194)
>The only value-add is secret rotation and that's not something that most of the time makes sense to use.

This attitude is why company after company keeps leaking customer data.

[ Parent | on HN ]
Re:AWS Secrets Manager – Store, Distribute, and Rotate Crede... by scrollaway on Wednesday April 04, 2018 @03:39PM (#16758201)
This hasty drawing of conclusions from a post that wasn't suggesting you shouldn't rotate secrets is why populist after populist keeps getting elected.
[ Parent | on HN ]
Re:AWS Secrets Manager – Store, Distribute, and Rotate Crede... by Johnny555 on Wednesday April 04, 2018 @04:00PM (#16758439)
Is it really a "hasty drawing of conclusions" when it's based on a simple reading of what was written?

[secret rotation,] that's not something that most of the time makes sense to use.

[ Parent | on HN ]
Re:AWS Secrets Manager – Store, Distribute, and Rotate Crede... by scrollaway on Wednesday April 04, 2018 @04:07PM (#16758499)
I just had a quick glance at my own app. The majority of the secrets in it are generated outside of AWS and (unless I'm misunderstanding the announcement) can't be rotated by this service without custom logic to rotate them; at which point, as I said in a separate post, I might as well write that custom logic on top of ParameterStore and cron it.
[ Parent | on HN ]