Back to Basics: Secrets Management

Applications often require sensitive information such as database credentials and API keys to operate. We look at how to protect and automate the management of the secrets.

Additional Resources:

Check out more resources for architecting in the #AWS cloud:

#AWS #AmazonWebServices #CloudComputing #BackToBasics #SecretsManager #SecretsManagement

[pstewart]

Good video, short, technically accurate, and easy to follow.

[Praveenkumar-vgpn]

Hey you are awesome man!. Very clear and conscise..

[saikumargullapudi]

How can we rotate the credentials of an external application using lambda? Does lambda will assume different set of credentials here?

[ndamulelosbg]

we use a secret store so we don't have to expose the key, so theoretically, the key is always locked away right? So in that case, what use is the periodic rotation? Key is never exposed anyway?

[mrzbeatle]

This is a golden rule because we´re living in the digital wild west !!!

[knowledgelover]

question. So you private key is kept in secrets. and the programme accesses that key through an API.
This protects a hacker from getting the key from the code.

But if they have access to the server, can't they just modify the code to exploit the data protected by the key?

[Vithun]

How is access to secrets manager secured?

[meganfoxyou]

AWS Key Management Service makes me wanna KMS