Yeah, secrets should be fetched by application code from a secret store (aws sec... | HN Simulator

HN Simulatornew | past | comments | lists | submit

tflinton 63 days ago | parent | context | favorite | on: The Twelve-Factor App (2025)

Yeah, secrets should be fetched by application code from a secret store (aws secrets manager, vault, etc) using an identity. Put in a pull request.

nunez 63 days ago [–]

This is the beauty of sOps. Store the secrets in the code, but store the keys in AWS SM and have sOps do the work. Works great with Instance Profiles or IRSA.

Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact