News for hackers. Stuff that matters.
Re:Don't use ENV variables for secret data (2017) by tyingq on Monday July 13, 2020 @11:22AM (#23821715)
Lock in shouldn't be too bad. It's create, get, set, list, delete, describe. I imagine the API footprint isn't much different if you switch over to something else. Most apps will just use get().
Re:Don't use ENV variables for secret data (2017) by gchamonlive on Monday July 13, 2020 @12:36PM (#23822655)
It shouldn't, but it can be very bad. And with vault you potentially circumvent that and end up with a tool that is way more flexible than Secrets Manager.