From the course: CompTIA SecurityX (CAS-005) Cert Prep

Unlock this course with a free trial

Join today to access over 24,300 courses taught by industry experts.

Secrets management

Secrets management

From the course: CompTIA SecurityX (CAS-005) Cert Prep

Start my 1-month free trial Buy for my team

Secrets management

“

- In this web Safari before we dive into secrets management at a cloud provider, I want to emphasize a very important concept for the SecurityX exam. And that is, we do not embed credentials or secrets, keys, OAuth tokens, anything like that into an API call. We don't store them with our code in GitHub, for example. We don't store them up in an Elastic Container registry or any other Git we might have in the cloud. We don't store these secrets or the keys or the credentials in our database tables, either we make a secure API call to some type of HSM cluster in our data center, or some Secrets Manager service in the cloud. So if we look at AWS here, this is the tool or the service we use to manage, retrieve, and rotate database credentials, application credentials, OAuth tokens, API keys, and other secrets throughout their lifecycle. So, we have other types of secrets as well. There's AWS credentials, there's encryption keys, there's secure shell keys. But we want to use this Secrets…

Contents