AWS Secrets Manager - The Default Choice
Use Cases and Deployment Scope
We have most of our infra on AWS, so naturally, AWS Secrets Manager plays a key role in managing the secrets.
Be it DB connection string, url, username, password, etc. all the little pieces that allow a service to connect to other services to do meaningful things, we store everything in AWS Secrets Manager.
Pros
- Single source of truth for secrets
- Securely share secrets with colleagues
- Securely store secrets for services to access during runtime
Cons
- The whole secret vs key-value naming could be confusing for beginner
- The lack of history is quite inconvenient
Return on Investment
- The ability to securely store & share secrets greatly improves security posture
- Services can be made to retrieve secrets externally at runtime
- Can control secrets for different environments for different groups of people
Alternatives Considered
Microsoft Azure Key Vault
Other Software Used
AWS Certificate Manager, AWS Systems Manager, Amazon CloudWatch
