Storing secrets securely in AWS
Being a DevOps engineer and codifying our infrastructure and applications for deployment through deployment pipelines doesn't take out the necessity of credentialing items such as usernames and passwords or third-party API authentication from our application. It does, however, present a need to authenticate on a much more secure and repeatable basis so that development and testing aren't hindered, along with only sharing access only with those who absolutely need to know. Not every developer who is working on a system needs a username and password to the database if they are all using the same application. You can also limit the management overhead of having to change the credentials every time there is a personal change if you, instead of passing the credentials out to every developer, have the developer request the credentials from a secrets manager. Although there are third-party solutions that perform this task, AWS does provide two different...