Choosing Between AWS Secrets Manager and Parameter Store
Every application has its secrets (database passwords, API keys, tokens, etc.), and they need to live somewhere that isn't a plaintext file committed to Git (please, don't). For those familiar with AWS, the first thought that comes to mind is to go with Secrets Manager to manage them, and it works great, except for the price per secret per month. Later down the road, it quietly turns into a line item nobody remembers approving once you multiply it across services, environments and regions. The good news is: for most secrets, there's a cheaper place to put them that's just as safe.
Storing secrets with SSM Parameter Store
Parameter Store is part of AWS Systems Manager, and it holds configuration values for your applications. For anything sensitive, you use the SecureString type, which encrypts the value at rest using AWS KMS; for everything else, you may either use String or...
Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE
