Secrets Manager

Jan 1, 0001

Definition

A Secrets Manager is a tool or service designed to securely store, manage, and access sensitive information such as API keys, passwords, certificates, and other confidential data. It provides mechanisms for encryption, access control, and auditing to ensure that secrets are protected against unauthorized access and leakage. Secrets Managers often integrate with applications and infrastructure to automate the retrieval and rotation of secrets, enhancing security and operational efficiency.

Secure Settings Example

# Example using AWS Secrets Manager with IAM policy
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "secretsmanager:GetSecretValue"
      ],
      "Resource": "arn:aws:secretsmanager:region:account-id:secret:example-secret",
      "Condition": {
        "IpAddress": {
          "aws:SourceIp": "192.0.2.0/24"
        }
      }
    }
  ]
}

Insecure Settings Example

# Example of insecure IAM policy for AWS Secrets Manager
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "secretsmanager:*",
      "Resource": "*"
    }
  ]
}