News for hackers. Stuff that matters.

A comment on 1Password Secrets Automation. Parent comment

Re:1Password Secrets Automation by DangitBobby on Tuesday April 13, 2021 @01:38PM (#26796045)
What are your criticisms of Google secrets manager? It works well for me, but it's the only one I've used so I don't know much about the competition.
[ Parent | on HN ]
Re:1Password Secrets Automation by bsamuels on Tuesday April 13, 2021 @02:17PM (#26796671)
By far the biggest missing control is you can't restrict access to google secrets manager by source CIDR.

There were a bunch of other smaller nitpicks, but that was the overwhelming reason last time I looked at it.

[ Parent | on HN ]
Re:1Password Secrets Automation by tedk-42 on Wednesday April 14, 2021 @09:44AM (#26806943)
IAM policies are designed for this reason, not IP based access controls.

E.g. in AWS you can specify the source CIDR range in an IAM policy.

[ Parent | on HN ]