Securing workloads using data protection services

on YouTube ↗20m

" summary

Fannie Mae describes an event-driven system that automatically vaults and rotates application credentials using AWS Secrets Manager, provisions service accounts via EventBridge and Lambda, and enforces per-workload encryption with customer-managed KMS keys (including multi-region keys) and AWS Private Certificate Authority. A JDBC wrapper pulls secrets at runtime so apps don’t handle creds, hybrid and non-AWS credentials are onboarded, and dozens of app secrets (often 50–60) are auto-managed, cutting admin toil.

AI-written summary · about

" chapters (3)

1. 0:00Introduction and goals
2. 5:00Secrets management strategy
3. 15:09Data encryption and compliance

" related talks

• 20mApplication Secret Management with AWS KMSAndrey Utis · DevOpsDays Philadelphia 2016
• 29mManaging Secrets in Your Cloud EnvironmentEvan Johnson, Maya Kaczorowski · BSidesSF 2018
• 58mUsing AWS data protection services for innovation and automationZach Miller, Ritesh Desai · AWS re:Inforce 2023
• 55mHandling secrets in cloud-based applicationsSteve Roberts · NDC Sydney 2020
• 30mSimplifying Secrets Management in the Public CloudKevin Tuffner · HashiTalks 2019
• 38mKeeping Secrets - A Practical Approach to Managing CredentialsChris Antenesse · ChefConf 2017
• 34mSecurity best practices for End User Computing ServicesHaneesh Kotha · AWS Summit Atlanta 2022
• 46mSecrets Management for the Modern Tech. ProAndy Syrewicze · PowerShell + DevOps Global Summit 2024