Secrets management
How to handle passwords, API keys, certificates and tokens across development and production: what counts as a secret, why environment variables and config files are only part of the answer, secret managers such as Vault and cloud services, injecting secrets into apps and Kubernetes, dynamic and short-lived credentials, rotation, and preventing leaks.
CodexBash, , 6 min read
Every application depends on secrets: database passwords, API keys for payment and email providers, signing keys for tokens, TLS private keys, cloud credentials. Each one, if leaked, can expose customer data or run up bills, and leaked credentials are among the most common causes of security breaches. Secrets management is the practice of storing, distributing, rotating and auditing these values so that they are available to the code that needs them and to nobody else. This article covers the principles and the tools, from a single developer's laptop to production clusters.
Sign in to read the rest
The whole 6 minute article is free with an account, along with every problem, lesson and tutorial. No card.