Don't use ENV variables for secret data (2017)

Re:Don't use ENV variables for secret data (2017) by falcolas on Monday July 13, 2020 @12:19PM (#23822453)

IMO, it gets expensive quickly, and it was designed around AWS' use case, which involves credentials that roll on a regular basis. Outside of RDS, its value for the price goes downhill quickly.

To a sister comment who mentions parameter store - that UI is the biggest leaking bag of horse manure I've ever had the displeasure of using. We made the mistake of using it, and moved over to Vault at the first available opportunity. Vault isn't a silver bullet either, but the UI is at least usable.

[ Parent | on HN ]

Re:Don't use ENV variables for secret data (2017) by Lazare on Tuesday July 14, 2020 @10:21AM (#23832270)

The web UI is bad, but tools like chamber (https://github.com/segmentio/chamber) are excellent, so there's no need to deal with the web UI.

[ Parent | on HN ]

Re:Don't use ENV variables for secret data (2017) by timmytokyo on Monday July 13, 2020 @05:29PM (#23825773)

I assume you mean Parameter Store's web console UI? I've never really used it; we use only API endpoints and command-line tools, and it works great.

[ Parent | on HN ]