#1 most frequent
United States of America
61.0%1,898 installations of 3,112
What is AWS Secrets Manager?
AWS Secrets Manager enables users to rotate, manage, and retrieve secrets throughout their lifecycle, making it easier to maintain a secure environment that meets security and compliance needs. With Secrets Manager, administrators pay based on the number of secrets stored and API calls made.
Categories & Use Cases
Product Demos
Who Buys & Uses AWS Secrets Manager
#2 most frequent
India
6.0%188 installations of 3,112
#3 most frequent
Canada
4.8%149 installations of 3,112
AWS Secrets Manager - The Default Choice
Use Cases and Deployment Scope
We have most of our infra on AWS, so naturally, AWS Secrets Manager plays a key role in managing the secrets.
Be it DB connection string, url, username, password, etc. all the little pieces that allow a service to connect to other services to do meaningful things, we store everything in AWS Secrets Manager.
Pros
- Single source of truth for secrets
- Securely share secrets with colleagues
- Securely store secrets for services to access during runtime
Cons
- The whole secret vs key-value naming could be confusing for beginner
- The lack of history is quite inconvenient
Return on Investment
- The ability to securely store & share secrets greatly improves security posture
- Services can be made to retrieve secrets externally at runtime
- Can control secrets for different environments for different groups of people
Alternatives Considered
Microsoft Azure Key Vault
Other Software Used
AWS Certificate Manager, AWS Systems Manager, Amazon CloudWatch
Great tool
Pros
- One trust source for all secrets
- You can divide them per environment
- You can give different access to users
Cons
- It could be good if a user can use a variable in the project but can't see them in the manager on AWS
Most Important Features
- Assign variables per environment
- Give permissions per user role
- One trust source for all variables
Return on Investment
- Costs are suitable
- ROI is positive
Other Software Used
AWS CloudFormation, AWS CodeBuild, AWS CodePipeline