{"id":39868,"date":"2021-09-30T17:13:49","date_gmt":"2021-09-30T17:13:49","guid":{"rendered":"https:\/\/www.vmengine.net\/2021\/09\/30\/secrets-manager-the-aws-keyholder-service\/"},"modified":"2025-05-23T17:32:15","modified_gmt":"2025-05-23T17:32:15","slug":"secrets-manager-the-aws-keyholder-service","status":"publish","type":"post","link":"http:\/\/temp_new.vmenginelab.com\/en\/2021\/09\/30\/secrets-manager-the-aws-keyholder-service\/","title":{"rendered":"Secrets Manager, the AWS keyholder service"},"content":{"rendered":"
\n
\n
\n
\n
\n

The
\n Amazon Web Services<\/strong>
\n<\/a> service that allows you to easily modify<\/strong> and manage<\/strong> the use of database credentials<\/strong>, API keys<\/strong> and other secret keys.<\/em><\/p>\n

Users have the ability to retrieve a “secret key<\/strong>” by calling the Secrets Manager APIs<\/strong>, without having to store highly confidential information in plain text.
The service is also integrated with
\n Amazon RDS<\/strong>
\n<\/a>,
\n Amazon Redshift<\/strong>
\n<\/a> , and
\n Amazon DocumentDB<\/strong>
\n<\/a> that allow for secret key changes through AWS service integration.<\/strong>
Security<\/strong> is another advantage of Secrets Manager<\/strong>, as it provides access control to secrets through granular permissions and allows you to perform change audits for resources in the AWS Cloud, third-party services, and on-premises.<\/p>\n

AWS Secrets Manager<\/strong> allows you to replace<\/strong> code-hardened credentials<\/strong> by using an API<\/strong> call<\/strong> to Secrets Manager to retrieve the secret programmatically. With this approach, Secrets Manager assures users that the secret is not directly compromised by the person examining the code, precisely because the secret is no longer present. In addition, AWS allows customers to configure<\/strong> Secrets Manager to automatically rotate the secret on a specific schedule as well.<\/strong><\/p>\n<\/div><\/div>\n

\n

\t\t\t\t\"\"<\/span><\/a>\n\t\t\t<\/div>\n

\n

Why choose Secrets Manager? <\/p>\n

<\/h2>\n<\/div><\/div>\n
\n
\n

AWS Secrets Manager provides secure secret<\/strong> key modification<\/strong> and helps you meet compliance<\/strong> and security requirements by allowing you to securely apply secret rotation<\/strong> without having to deploy code.<\/p>\n<\/div><\/div>\n

\n
<\/div>\n
Read more about AWS compliance<\/a><\/div>\n<\/p><\/div>\n
\n
\n

Another advantage, given by
\n the worldwide infrastructure network of Amazon web Services<\/strong>
\n<\/a>, is that Secrets Manager also allows you to easily replicate secret keys<\/strong> in multiple Regions<\/strong> <\/a>to support multi-Region applications and Disaster Recovery<\/strong> scenarios. The multi-region secrets<\/strong> feature avoids the complexity of replicating<\/strong> and managing secrets across regions because it allows you to easily access and read<\/strong> secrets where you need them.<\/p>\n<\/div><\/div>\n

\n

\t\t\t\t\"\"<\/span>\n\t\t\t<\/div>\n

\n
<\/div>\n
Disaster Recovery. How much is a "contingency" plan worth?<\/a><\/div>\n<\/p><\/div>\n
\n
\n

Secrets Manager<\/strong> allows you to manage access to secrets<\/strong> using AWS Identity and Access Management (IAM)<\/strong><\/p>\n

<\/a> policies<\/strong> and resource-based policies. Specifically, you can create a policy<\/strong> that allows developers to use certain secrets only for the development environment. At the same time, the policy could allow developers to use passwords<\/strong> used in production only<\/strong> if their requests come from the internal<\/strong> IT network<\/strong>.
In addition, it is also possible to create policies for database administrators<\/strong> that allow them to manage all the database credentials and SSH key<\/strong> read permissions needed to perform operating system-level changes on the specific instance where the database is hosted.<\/p>\n

With Secrets Manager<\/strong>, you can protect your secrets by encrypting them using keys that are managed with AWS Key Management Service (KMS).<\/strong><\/p>\n

<\/a> In addition, the service integrates with other AWS access and monitoring<\/strong> services to enable centralized audits<\/strong>.<\/p>\n<\/div><\/div>\n

\n
\n

Want to learn more about the power of AWS services?<\/h2>\n<\/div>\n
Talk to an Expert<\/a><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

The AWS service that allows you to easily modify and manage the use of database credentials, API keys, and other secrets.<\/p>\n","protected":false},"author":6,"featured_media":34022,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[97,1374],"tags":[71,132,72,133,3980,4059,4691,4780,1270,1202],"class_list":["post-39868","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog-en","category-the-analysis","tag-amazon-web-services","tag-amazon-web-services-en","tag-aws","tag-aws-en","tag-cloud-security-aws","tag-cloud-security-aws-en","tag-secrets-manager","tag-secrets-manager-en","tag-security-en","tag-security"],"aioseo_notices":[],"jetpack_featured_media_url":"http:\/\/temp_new.vmenginelab.com\/wp-content\/uploads\/2021\/09\/CreamyFormalChanticleer-size_restricted-1.gif","amp_enabled":true,"_links":{"self":[{"href":"http:\/\/temp_new.vmenginelab.com\/en\/wp-json\/wp\/v2\/posts\/39868","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/temp_new.vmenginelab.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/temp_new.vmenginelab.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/temp_new.vmenginelab.com\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/temp_new.vmenginelab.com\/en\/wp-json\/wp\/v2\/comments?post=39868"}],"version-history":[{"count":1,"href":"http:\/\/temp_new.vmenginelab.com\/en\/wp-json\/wp\/v2\/posts\/39868\/revisions"}],"predecessor-version":[{"id":41655,"href":"http:\/\/temp_new.vmenginelab.com\/en\/wp-json\/wp\/v2\/posts\/39868\/revisions\/41655"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/temp_new.vmenginelab.com\/en\/wp-json\/wp\/v2\/media\/34022"}],"wp:attachment":[{"href":"http:\/\/temp_new.vmenginelab.com\/en\/wp-json\/wp\/v2\/media?parent=39868"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/temp_new.vmenginelab.com\/en\/wp-json\/wp\/v2\/categories?post=39868"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/temp_new.vmenginelab.com\/en\/wp-json\/wp\/v2\/tags?post=39868"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}