Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: A self-hosted, AWS-based secrets manager

embrasure.dev

Post reply on HN
Print view View original

11–20 of 37 posts

Re: Show HN: A self-hosted, AWS-based secrets manager

#11

Post by 2bluesc »

TaronAvagyan wrote: post #7
2bluesc wrote: post #4

> Embrasure is an open-source, self-hosted secrets management tool built on Amazon Web Services (AWS) for small teams seeking simplicity and security. Was excited to hear about self-hosted secrets management, but expected "self-hosted" to mean I can host anywhere, but the depends specific AWS features. Perhaps "unmanaged" is a more appropriate term.

> expected "self-hosted" to mean I can host anywhere You're referring to a cloud-agnostic solution. Embrasure is self-hosted since each instance is deployed within an organization's infrastructure, but as you mentioned, it's AWS-dependent.

> You're referring to a cloud-agnostic solution.

I actually mean that the service need not care if it's in the cloud or on-premise as opposed to whose cloud. Many of my services don't need to do anything in the cloud.

If you look at things like awesome-selfhosted[0] you'll see that this is the prevailing expectation of things describing themselves as "self-hosted".

[0] https://github.com/awesome-selfhosted/awesome-selfhosted

Re: Show HN: A self-hosted, AWS-based secrets manager

#14

Post by linuxdude314 »

TaronAvagyan wrote: post #7
2bluesc wrote: post #4

> Embrasure is an open-source, self-hosted secrets management tool built on Amazon Web Services (AWS) for small teams seeking simplicity and security. Was excited to hear about self-hosted secrets management, but expected "self-hosted" to mean I can host anywhere, but the depends specific AWS features. Perhaps "unmanaged" is a more appropriate term.

> expected "self-hosted" to mean I can host anywhere You're referring to a cloud-agnostic solution. Embrasure is self-hosted since each instance is deployed within an organization's infrastructure, but as you mentioned, it's AWS-dependent.

No, this is not what self hosted means.

This is a self managed AWS solution; nothing wrong with that.

Re: Show HN: A self-hosted, AWS-based secrets manager

#15

Post by linuxdude314 »

TaronAvagyan wrote: post #8
minebreaker wrote: post #5

Why not the SSM parameter store?

SSM is a great alternative, but it's a managed solution. Embrasure is self-hosted.

It’s self managed, AWS is hosting it.

This may seem like nit picking, but I can assure you confusing your audience will hamper the success of your project if you are aiming for growth.

Re: Show HN: A self-hosted, AWS-based secrets manager

#16

Post by TaronAvagyan »

johnea wrote: post #13

Contradiction in terms: "self-hosted, AWS-based"

I would disagree. Sure, you don't own the hardware, but you have total control over Embrasure's functionality within your self-contained instance.

Wikipedia: "Self-hosting is the practice of running and maintaining a website or service using a private web server, instead of using a service outside of someone's own control."

Re: Show HN: A self-hosted, AWS-based secrets manager

#17

Post by _r5xp »

linuxdude314 wrote: post #15
TaronAvagyan wrote: post #8

Earlier quoted context omitted.

SSM is a great alternative, but it's a managed solution. Embrasure is self-hosted.

It’s self managed, AWS is hosting it. This may seem like nit picking, but I can assure you confusing your audience will hamper the success of your project if you are aiming for growth.

[dead]

Re: Show HN: A self-hosted, AWS-based secrets manager

#18

Post by motles »

Feedback: you need to state very clearly, high up on the page WHY someone would want to use a non-managed solution vs SecretsManager or SSM Parameter Store.

The website has way too much information that is basic credentials store 101. I know why I’d want a secrets manager already.

and if you are targeting users/builders on AWS (which you are implicitly if you can’t run off AWS) you need to be clear as to why anyone would waste time with an unmanaged solution

Re: Show HN: A self-hosted, AWS-based secrets manager

#19

Post by TaronAvagyan »

motles wrote: post #18

Feedback: you need to state very clearly, high up on the page WHY someone would want to use a non-managed solution vs SecretsManager or SSM Parameter Store. The website has way too much information that is basic credentials store 101. I know why I’d want a secrets manager already. and if you are targeting users/builders on AWS (which you are implicitly if you can’t run off AWS) you need to be clear as to why anyone w…

That's a fair point. Thanks for the feedback!
Post reply on HN