Protecting your Cloud Secrets with AWS Secrets Manager

Securely storing passwords in the cloud is essential for web applications. Secrets Manager is the best way to store and access usernames and passwords in AWS, and in this video I walk through how to create and work with these secrets. Watch this video for more details!

Table of Contents:
0:00 Introduction
1:04 Previous methods of credential storing in AWS
2:43 AWS Secrets Manager
4:22 Database credential rotation
6:57 Creating a secret in the Web Console
11:13 Retrieving a secret in JavaScript
12:16 Retrieving a secret with the AWS CLI
16:26 Final thoughts

#aws #SecretsManager #clouddev

[nabilalhusail]

Ok, but here's the question
where do I store the api key/secret that allows me to connect to AWS Secrets Manager?
I mean, I can hide all connection secrets in the cloud, but if a malicious user gains access to (example: .env.production) which has the key to access the secrets storage, how am I more safe?

[blockchainforeveryone]

Thanks for the excellent video.
Can you please explain: how to prevent the access from the command line ? since If the server somehow was compromised and an attacker is in the server --> I want to make his life hard as possible and not allow access from the command line. I assume that it is to give the container some permission level that will allow access to the secrets component, is it correct ?
many thanks

[VinaySingh-gwyi]

If my python application is running on ec2 instance will be need an iam role with permissions to read secret??

[DKLHensen]

Quality post! If this was a cats video, you would have 1M views already