Back to Lessons
Intermediate 20 min
Secrets Management
Vault, AWS Secrets Manager, SOPS, git-crypt - keep secrets out of your code and your logs.
“There are two types of companies: those that have committed secrets to git, and those that will.”
What you'll learn
Hashicorp VaultAWS Secrets ManagerSOPSgit-cryptgit-secrets
Never store secrets in git. Use a secrets manager: Vault (self-hosted), AWS Secrets Manager (managed), or SOPS (encrypted files in git with key management).
git-secrets (from AWS) prevents committing secrets by scanning for patterns before each commit. Install as a pre-commit hook globally.