AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
1–10 of 137 posts
Re: AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
#2I'm still trying to figure out how different this is from their "parameter store" offering in AWS Systems Manager. The main thing I guess is you get more control over key rotation.
Re: AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
#3Besides the secrets rotation how is this different from EC2 Parameter Store? I’m genuinely curious and will move away from parameter store if this provides some benefits.
Re: AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
#4Besides the secrets rotation how is this different from EC2 Parameter Store? I’m genuinely curious and will move away from parameter store if this provides some benefits.
[deleted]
Re: AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
#5Besides the secrets rotation how is this different from EC2 Parameter Store? I’m genuinely curious and will move away from parameter store if this provides some benefits.
Skimming the blog post, the main difference seems that it allows you to basically store a dict of key/value pairs for each secret. So for example, you could store all the user/pass/host/port for a DB connection as a secret. If I recall correctly, Parameter Store could only store a single SecureString for each secret.
Re: AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
#6How is this different than KMS? “Key Management Service” is practically synonymous with the name of this new product, so how exactly do the two differ/interact?
Re: AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
#7This looks like an AWS equivalent of the Amazon-internal secret management tool called Odin. Which is very nice because Odin was pretty much universally loved from what I saw.
Re: AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
#8This looks like an AWS equivalent of the Amazon-internal secret management tool called Odin. Which is very nice because Odin was pretty much universally loved from what I saw.
I miss having ODIN.
Re: AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
#9How is this different than KMS? “Key Management Service” is practically synonymous with the name of this new product, so how exactly do the two differ/interact?
I believe KMS is primarily for storing encryption keys (to replace an HSM). AWS Secrets Manager looks like it's much easier to integrate into credential best practices, like periodic rotation.
Re: AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
#10How is this different than KMS? “Key Management Service” is practically synonymous with the name of this new product, so how exactly do the two differ/interact?
KMS is a shared HSM, managed encryption product.
AWS Secrets Manager is for storing credentials to products (e.g. DBs) and have processes for automatically rotating them on a regular basis.