Real World DevOps: Securely Managing Credentials In Applications
Get the DevOps Roadmap for 2022 here: https://devopsfordevelopers.io/roadmap
Every app has some type of credentials to be managed. Database passwords, API keys, 3rd party services, and more. So how to you securely get these into your app without comprimising them?
In this video you will learn 4 different ways to tackle this:
CLI arguments
Environment Variables
.env files
Using a secrets manager like AWS or Hashicorp Vault
We'll cover the pros and cons of each and I'll show you how I implemented it in the new app I'm building, leetproof.com.
——————————🎥 C H A P T E R S ——————————
0:00 Introduction
0:44 Using command line arguments
1:31 Setting via environment variables
2:37 .env or credential files
3:32 Pulling secrets from a secrets manager
5:10 Securing access to secrets manager
5:34 Rotating credentials (a good thing to make easy)
6:17 Mitigating concerns
——————————👋 C O N N E C T ——————————
Discord ▻ https://devopsfordevelopers.io/discord
Twitter ▻ / wfbutton
——————————🛠 R E S O U R C E S ——————————
The DevOps Career Guide ▻ https://devopsfordevelopers.io/devops...
DevOps Roadmap ▻ https://devopsfordevelopers.io/roadmap
DevOps merch ▻ https://devopsfordevelopers.io/merch