Episode 99. SHHH! It’s a secret! (Storing API Keys / Passwords / tokens!)
Ok, so is time to talk about something secretive! Like API Passwords, Auth tokens, or keys… these are things that we want to have as a Secret within our microservice. And yeah, adding them into your source code is a big no-no
Here we cover the dos (and dont’s) of secret management, what are the benefits and drawbacks of the different solutions and we explore some of our favorite open source (and Cloud tools) for keeping secrets. We answer some important questions on how to effectively store and manage these secrets (the short answer is don’t try to do it yourself!), and end up with the list of best practices for it.
If you are building a non-trivial (or interesting) web service, this is a must-listen episode!
We thank DataDogHQ for sponsoring this podcast episode
Don’t forget to SUBSCRIBE to our cool NewsCast OffHeap!
Using AWS Secrets Manager to manage secrets in Spring Boot
AWS Secrets Manager
Spring Cloud AWS
Do you like the episodes? Want more? Help us out! Buy us a beer!
And Follow us!