AWS KMS

Following our previous tutorial about using AWS KMS for secrets management, this second part explores how to leverage AWS Secrets Manager with Terraform/OpenTofu for more advanced secrets management capabilities. AWS Secrets Manager provides additional features like automatic rotation, fine-grained access control, and centralized secrets management. Prerequisites AWS Account with appropriate permissions Terraform/OpenTofu installed AWS CLI configured [Optional] Basic understanding of AWS KMS (covered in Part 1) 1 — Setting Up AWS Secrets Manager First, let’s create the necessary resources to store and manage our secrets: ...

Secure Secrets Management in Terraform — Part1: Leveraging AWS KMS One of the key principles of modern Infrastructure as Code is the secure management of sensitive information. In thins first part of our series about secure secrets management in Terraform/OpenTofu, we will focus on the use of AWS Key Management Service, better known as KMS, to securely encrypt and manage secrets with Terraform/OpenTofu. Prerequisites AWS Account with appropriate permissions Terraform/OpenTofu installed AWS CLI configured AWS KMS First, let’s create a KMS key with proper permissions and configurations: ...