AWS Secrets

Question 1

What are AWS Secrets?

Answer 1

A fully managed service for managing your secrets can be used with your app through the API, RDS, Redshift, DocumentDB

Question 2

How can I restrict who can access secrets?

Answer 2

You have fine-grained control over using IAM and resource-based policies.

Question 3

Has AWS Secrets got automatic key rotation?

Answer 3

Yes

Question 4

What DB’s are integrated with AWS Secrets?

Answer 4

MySQL, Postgres and Aurora

Question 5

When using AWS Secrets with databases like MySQL, what is the flow of how the secrets are managed?

Answer 5

AWS Secrets creates a Lambda function to manage the secrets in the database, you have to give the lambda function access to the DB, to do this require the security group to all this.

Question 6

How can I see what is happening with the AWS Secret lambda?

Answer 6

The AWS Secrets Lambda logs to the CloudWatch.

Question 7

I have an application and I need to store sensitive user name and password, what are my best options?

Answer 7

Use AWS Secrets, this will enable you to use the AWS Secrets API to store the user name and password secure and not in the application.