AWS Parameter Store: Secure store of keys with AWS and Serverless Framework | Serverless

How to securely store keys and other secrets using AWS Parameter Store and Serverless Framework?

★★ README / OPEN ME ★★

☆☆ ABOUT THIS VIDEO ☆☆
In this video I will show you how to securely store keys, licences, passwords using the AWS Parameter Store and then utilize them in your Serverless Framework project.

☆☆ FOLLOW ME ONLINE ☆☆

Instagram: foobar_codes

☆☆ ABOUT FOOBAR ☆☆
In this channel you can find mostly coding tutorials related to cloud and serverless.
In addition, I like also talking about architecture, software design, motivation and leadership.
There is a new video every Tuesday, so stay tuned :)

☆☆ SPONSORSHIP ☆☆
Does your company wants to sponsor a video? Contact me by twitter or by email (email address in the about page)

[mateus.duraes]

Great video, helped me a lot, thanks

[jayprakashmanjhi]

Hi,
Thank you so much for your sharing usefull information.

Could you please share how we can secure JSON file in Aws lambda which contains the secret information about multiple clients that is used in lambda to read information based on the client requests.

[tonygray]

Greetings from Australia Miss Foo Bar! -- Thank you so much for your awesome videos! I am just getting into the serverless world and you have made it so much easier to get the basic understanding of how to get these things running. I still have a long way to go designing a full application but for now I will slowly try to break down my monolith app currently being developed, with your help of course! Keep up the great work, I really love your way of explaining things. tu, tu, tu!

[rickhmason]

Marcia,

I always thought KMS was the best way to securely store. What is the difference between KMS and the parameter store and what is the best use of each?

[TerrenceBenade]

Hi Marcia, great content as usual but may I be so bold as to point out a couple suggestions for even further improved security of a real secret and consistency of data in your environment. While you have solved the problem of secret not ending up in the source code it is still now readable in plain text in the console of both lambda and ssm. You also have the problem of any update to ssm not being realised by your function as you essentially copied the value to a static envar at time of deployment. You may want to do a follow up video demonstrating how to rather call SSM directly from the function code and using KMS to encrypt/decrypt your secret will not only give you secret assurity but a consistent single source of truth for the possible clients. Hope that makes sense and inspires some super secret management content. Adios.

[PrzemysawSech]

Again, amazing video!
A random, not related to this video, question came to my mind.
I'm deploying my app to region: ap-southeast-2 (greetings from Sydney). However, I'd like to use SES which is not available for me. How could I use a service from the other region, e.g. Ireland :)?
Cheers, Przemek