TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Biscuit: a multi-region key value store for your AWS infrastructure secrets

111 pointsby ptest1almost 9 years ago

8 comments

technologiaalmost 9 years ago
The project is nice, but I'm gonna have to stick with Vault as I like the flexibility of storage backends and not locked into AWS for enterprise-y apps that can't go to AWS.
评论 #12112965 未加载
amhoabalmost 9 years ago
This is also similiar to Sneaker (<a href="https:&#x2F;&#x2F;github.com&#x2F;codahale&#x2F;sneaker" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;codahale&#x2F;sneaker</a>), which is written in Go. It doesn&#x27;t copy to other regions by default, but it&#x27;s not hard to handle that on your own. This also uses KMS, but stores encrypted secrets in S3.
carrja99almost 9 years ago
I prefer credstash (<a href="https:&#x2F;&#x2F;github.com&#x2F;fugue&#x2F;credstash" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;fugue&#x2F;credstash</a>) which uses KMS and stores encrypted values in dynamodb. It has built in ansible support via lookups too!
thatrascaltigeralmost 9 years ago
It looks like this is fairly similar to Mozilla sops[1].<p>[1]<a href="https:&#x2F;&#x2F;github.com&#x2F;mozilla&#x2F;sops" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;mozilla&#x2F;sops</a>
评论 #12115108 未加载
hendryalmost 9 years ago
At work we use chef to deploy our credentials via KML flat files on the servers that require them. Works rather well.
评论 #12121609 未加载
bluecmdalmost 9 years ago
Why no key rotation? I&#x27;d be very careful with something that doesn&#x27;t rotate keys.
评论 #12117070 未加载
moondevalmost 9 years ago
I feel like this problem is already solved with iam ec2 instance roles<p><a href="http:&#x2F;&#x2F;docs.aws.amazon.com&#x2F;AWSEC2&#x2F;latest&#x2F;UserGuide&#x2F;iam-roles-for-amazon-ec2.html" rel="nofollow">http:&#x2F;&#x2F;docs.aws.amazon.com&#x2F;AWSEC2&#x2F;latest&#x2F;UserGuide&#x2F;iam-roles...</a>
评论 #12113111 未加载
评论 #12113110 未加载
评论 #12115024 未加载
Xorlevalmost 9 years ago
Somewhat off-topic, but I read dcoker&#x27;s username as docker at first and was fairly confused as to why docker was producing something like this just for AWS.