dwyl / dwyl/technology-stack

Secrets Management? Alternative to Hashicorp `Vault`?

Open
#122 3 comments 0 reactions 0 assignees View on GitHub
chore discuss help wanted priority-3 question research T1h technical
Dominant language
JavaScript
Stars
291
Forks
25
PR merge metrics
No merged PRs in 30d

Description

We need a way to _seamlessly_ share highly secure secrets as a Team.
Specifically if more than one person in the team is testing the `Auth` App [running on `localhost`],
there will are at _least_ 10 evironment variables to be shared: https://github.com/dwyl/auth/blob/main/.env_sample
We've done this in the past by sharing a `.txt` file via [`Signal`](https://github.com/dwyl/learn-security/issues/68).
This _works_ in a pinch because it's end-to-end encrypted, but it's really not a good way of doing it. 💭

At companies we've worked in the past the DevOps teams have used Hashicorp `Vault`: https://www.vaultproject.io
image

Just signed up and to launch a `Vault` instance is `$25.92/month` ...
image

Just to store secrets ... 💸
Feels like this should be a Serverless App that only runs when people are _using_ it.
Is there _already_ a way of doing this where a Serverless App stores data _strongly_ Encrypted on `S3`
and has strong access controls and team management?

Need to make time to investigate this so that sharing secrets with new team members is faster. 🚀
For now just going to continue using the `Signal` approach ... 💭

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.