Learn 3 DevOps ways to manage the application secrets your app needs like usernames, passwords, and API keys and one way you should *never* use! In the video, I cover how to share secrets with your application, the techniques you need to minimize attack surface areas, and security.
Examples include using Docker, environment variables, secret files and secret management stores like AWS secrets manager.
0:00 Overview
0:50 How to *never* store credentials for your app
1:45 Storing credentials as environment variables
4:30 Storing credentials in a file shared with your application
6:08 Defining your secret management policy for compliance and regulatory audits
7:00 Pulling credentials from a store like AWS Secrets Manager into your app
12:10 Recap all 3 strategies, takeaways