Managing Secrets in Your Cloud Environment

on YouTube ↗29m

" summary

Central recommendation: stop putting credentials in code and centralize. Hands-on solutions compared: HashiCorp Vault (dynamic creds, but operationally heavy because of Vault unseal keys), AWS KMS + SSM Parameter Store (used at scale with a homemade chamber CLI to fetch secrets and enforce per-service IAM), and the new AWS Secrets Manager for built-in rotation. Notes: Segment reports thousands of secrets and hits SSM rate limits on mass boot, GCP lacks a Parameter-Store equivalent so use Cloud KMS + storage and enable data-access audit logs.

AI-written summary · about

" chapters (17)

1. 0:00Start
2. 2:54Why Management of Secrets Is So Important
3. 5:09Centralized Secret Management
4. 6:11What Not To Do Putting Secrets in Code
5. 6:47Differential Protection
6. 8:05Encryption
7. 8:22Rotation
8. 8:55Separation of Duties
9. 10:46Vaults
10. 11:51Authentication Method
11. 14:33What's Next
12. 14:52Secrets Manager Service
13. 15:29Aws Kms Key Management Service
14. 16:10Aws Kms
15. 16:45Ssm Parameter Store
16. 25:52Secret Management Options
17. 27:30Root Secret

" related talks

• 47mManaging your Secrets in a Cloud EnvironmentTaswar Bhatti · Update Conference Prague 2018
• 30mSimplifying Secrets Management in the Public CloudKevin Tuffner · HashiTalks 2019
• 29mBehind Closed Doors: Managing Passwords in a Dangerous WorldNoah Kantrowitz · PyCon AU 2016
• 38mKeeping Secrets - A Practical Approach to Managing CredentialsChris Antenesse · ChefConf 2017
• 41mModern Security with Microservices and the CloudSandeep Dinesh · NDC Oslo 2018
• 55mHandling secrets in cloud-based applicationsSteve Roberts · NDC Sydney 2020
• 28mYour Secrets in Cloud-Based Key Management ServicesDan O'Boyle · LISA17
• 26mSecret Management in Kubernetes: The GitOps Way - Benjamin RitterBenjamin Ritter · ContainerDays 2023