From the course: AWS Certified Security - Specialty (SCS-C03) Cert Prep

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Storing Secrets

Storing Secrets

Hi, guys, in this lesson, we're going to look at two different AWS services that we can use for storing secrets. Now, what do I mean by secrets? Well, secrets are things like usernames and passwords, database connection strings, basically any sort of key value pair that we can store that we don't want anyone to find. So we can store it in encrypted state. And we can have authentication and access control on those secrets so that we or our applications that we're creating can access them, but no one else can. First there's the AWS Systems Manager Parameter Store, also known simply as AWS SSM Parameter Store. Parameter Store provides secure hierarchical storage for configuration data and secrets. It's scalable, available and durable, and you can store things like passwords, database connection strings, and license codes as parameter values. The values can be stored as plain text, unencrypted data, or as ciphertext that's encrypted data. You reference the values by using the unique name…

Contents