AWS - Secret Management

This is to store the secrets like user name password or private key or any other sensitive information that we need to use during automation.

I am developing github actions workflow for one of my application and i have issue in getting private key from terraform and i need to provide that for ansible for doing configuration in that machine. I tried different methods like storing as .pem, getting them from terraform output storing it in env var then providing to ansible job these are all make complex and also less secure so, i started learning secret management.

Secret Management Platforms

• AWS Systems Manager - Parameter Store → To store normal sensitive information link which need not to be rotated. for example username, registry url etc

• AWS Secret Manager → Very sensitive information which required rotation of those secrets. for example database password, certificates etc

• Hashicorp Vault → Dedicated secret management solution , this is helpful when organisation is using multi cloud deployment then using AWS secret management become bottleneck so hashicorp will help to solve this it can be used in any of the cloud```