How to Use AWS Secrets Manager for Storing Credentials

Are you wondering how to store credentials in AWS? Or keep passwords secure in AWS ? 

AWS Secrets Manager is the key for storing this crucial information!

You no longer have to worry about hardcoding these secrets when you want to access applications, services, and IT resources. Just route the access through AWS Secrets Manager for a safer experience. 

So, in this short blog, we will show you how to get started with AWS Secrets Manager. 

What is AWS Secrets Manager?

AWS Secrets Manager enables you to replace hard coded credentials in your code, including passwords, with an API call to Secrets Manager to retrieve the secret programmatically.

For example, private container images in the Docker hub or other repositories are not available publicly to fetch via a URL. We need to add the credentials of public repositories in AWS Secrets Manager. 

Think of AWS Secrets Manager as a secure way to access passwords, keys, etc. It eliminates the need to hardcode sensitive information in plain text format.  

How to Add a Secret in AWS Secrets Manager 

Follow these simple steps below to add a secret in AWS Secrets Manager. 

Step 1: Go to AWS Secrets Manager >> Secrets >> Store a new secret. 

Step 2: Under “Select Secret Type” select “Other types of secrets”.

Step 3: Select Plaintext in Specify the key/value pairs to be stored in this secret 

Step 4: Paste the username and password in the following format. This is the secret you are storing. 

{

“username”: “admin”,

“password”: “mypassw0rd”

}

Step 5: Click Next. 

Step 6:  For Secret Name, give an identifiable name. Leave the rest as it is and go to the next page.

Step 7: Keep Disable automatic rotation by default. 

Step 8: Click Next and store the secret. 

Step 9: You can use the Secret ARN in different AWS applications to authenticate a service elsewhere.

Wrapping Up

Access and read your secrets whenever you need them, wherever you are with AWS Secrets Manager. 

At SysAlly, we experiment with Cloud and the most useful information is passed on to the world as blogs. Signup for the updates.

Until later, here’s SysAlly signing off!