TrustRadius: an HG Insights company

AWS Secrets Manager

Score9.7 out of 10

8 Reviews and Ratings

What is AWS Secrets Manager?

AWS Secrets Manager enables users to rotate, manage, and retrieve secrets throughout their lifecycle, making it easier to maintain a secure environment that meets security and compliance needs. With Secrets Manager, administrators pay based on the number of secrets stored and API calls made.

AWS Secrets Manager - The Default Choice

Use Cases and Deployment Scope

We have most of our infra on AWS, so naturally, AWS Secrets Manager plays a key role in managing the secrets.

Be it DB connection string, url, username, password, etc. all the little pieces that allow a service to connect to other services to do meaningful things, we store everything in AWS Secrets Manager.

Pros

  • Single source of truth for secrets
  • Securely share secrets with colleagues
  • Securely store secrets for services to access during runtime

Cons

  • The whole secret vs key-value naming could be confusing for beginner
  • The lack of history is quite inconvenient

Return on Investment

  • The ability to securely store & share secrets greatly improves security posture
  • Services can be made to retrieve secrets externally at runtime
  • Can control secrets for different environments for different groups of people

Alternatives Considered

Microsoft Azure Key Vault

Other Software Used

AWS Certificate Manager, AWS Systems Manager, Amazon CloudWatch

Great tool

Pros

  • One trust source for all secrets
  • You can divide them per environment
  • You can give different access to users

Cons

  • It could be good if a user can use a variable in the project but can't see them in the manager on AWS

Most Important Features

  • Assign variables per environment
  • Give permissions per user role
  • One trust source for all variables

Return on Investment

  • Costs are suitable
  • ROI is positive

Other Software Used

AWS CloudFormation, AWS CodeBuild, AWS CodePipeline