Exploring Cloud Secret Store on AWS
A very common way to store Secrets in the cloud is to utilize the infrastructure that is provided by cloud providers. The major cloud providers have two essential pieces of infrastructure that help us with efficient Secrets management on Kubernetes: Secret Storage and KMS.
In this chapter, we shall examine AWS Secrets Manager, Elastic Kubernetes Service (EKS) integration, and secret encryption with KMS. Specifically, we will cover these topics:
- Overview of AWS Secrets Manager
- Secrets Store CSI Driver
- AWS EKS clusters and AWS Secrets Manager
- KMS for AWS Kubernetes encryption
By the end of the chapter, we should be able to use AWS Secrets Manager as an external Kubernetes secret store, encrypt Secrets on Kubernetes using AWS KMS, and search audit logs on secret operations using AWS CloudTrail and AWS CloudWatch.