Show HN: A self-hosted, AWS-based secrets manager
embrasure.dev
Show HN: A self-hosted, AWS-based secrets manager
1–10 of 37 posts
Re: Show HN: A self-hosted, AWS-based secrets manager
#2This is really cool - what did you use for the diagrams?
Re: Show HN: A self-hosted, AWS-based secrets manager
#3This is really cool - what did you use for the diagrams?
Thanks! We used Adobe and svgrepo.com for vectors.
Re: Show HN: A self-hosted, AWS-based secrets manager
#4> Embrasure is an open-source, self-hosted secrets management tool built on Amazon Web Services (AWS) for small teams seeking simplicity and security.
Was excited to hear about self-hosted secrets management, but expected "self-hosted" to mean I can host anywhere, but the depends specific AWS features.
Perhaps "unmanaged" is a more appropriate term.
Re: Show HN: A self-hosted, AWS-based secrets manager
#5Why not the SSM parameter store?
Re: Show HN: A self-hosted, AWS-based secrets manager
#6I try my best to avoid secrets and leverage aws-iam-auth or SPIFFE/SPIRE where at all possible.
Re: Show HN: A self-hosted, AWS-based secrets manager
#7> Embrasure is an open-source, self-hosted secrets management tool built on Amazon Web Services (AWS) for small teams seeking simplicity and security. Was excited to hear about self-hosted secrets management, but expected "self-hosted" to mean I can host anywhere, but the depends specific AWS features. Perhaps "unmanaged" is a more appropriate term.
> expected "self-hosted" to mean I can host anywhere
You're referring to a cloud-agnostic solution.
Embrasure is self-hosted since each instance is deployed within an organization's infrastructure, but as you mentioned, it's AWS-dependent.
Re: Show HN: A self-hosted, AWS-based secrets manager
#8Why not the SSM parameter store?
SSM is a great alternative, but it's a managed solution. Embrasure is self-hosted.
Re: Show HN: A self-hosted, AWS-based secrets manager
#9I try my best to avoid secrets and leverage aws-iam-auth or SPIFFE/SPIRE where at all possible.
I agree this is generally a good idea, but sometimes you can't avoid using secrets. Right?
Re: Show HN: A self-hosted, AWS-based secrets manager
#10Why not the SSM parameter store?
SSM is a great alternative, but it's a managed solution. Embrasure is self-hosted.
Thanks for your reply, but as far as I read the documentation, your solution relies on AWS. If so, manged vs self-hosted is not really an issue since you are already locked into AWS. If it works without AWS, then it makes sense.