AWS Secrets Manager Solves Security Vulnerability

Forum Moderators: phranque

Message Too Old, No Replies

AWS Secrets Manager Solves Security Vulnerability

engine

4:36 pm on Apr 5, 2018 (gmt 0)

AWS Secrets Manager solves a security vulnerability of leaked credentials where developers programatically insert the credentials their apps require without writing to the source code or environment variables.

[aws.amazon.com...]

makes it easy to store and retrieve your secrets via API or the AWS Command Line Interface (CLI) and rotate your credentials with built-in or custom AWS Lambda functions. Managing application secrets like database credentials, passwords, or API Keys is easy when you’re working locally with one machine and one application.

AWS Secrets Manager is available today in US East (N. Virginia), US East (Ohio), US West (N. California), US West (Oregon), Asia Pacific (Mumbai), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), EU (Frankfurt), EU (Ireland), EU (London), and South America (São Paulo).

graeme_p

5:39 pm on Apr 5, 2018 (gmt 0)

Its seems to mostly solve the problem of sharing secrets across multiple instances.

The other problem is that you still need to store the AWS key you need to retrieve the secrets, and if that leaks it will provide access to all your secrets.