Best practices for managing and storing secrets like API keys and credentials

Re:Best practices for managing and storing secrets like API ... by bdcravens on Friday June 12, 2020 @04:58PM (#23503825)

> Secrets management systems such as Hashicorp Vault or AWS Key Management Service

KMS isn't a secrets management system. It's for managing encryption keys, though it can be used in tandem with AWS's Parameter Store, which can be used as a secret management system. As a matter of fact, Task Definitions in ECS can pull those secrets out as environment variables in your containers, which IMO is pretty elegant.

[ Parent | on HN ]

Re:Best practices for managing and storing secrets like API ... by philipov on Friday June 12, 2020 @05:22PM (#23504032)

I laugh every time I see KMS used as the initialism for that, because in my circles that's short for "Kill MySelf."

[ Parent | on HN ]