Terraspace Secrets with AWS: Don’t Commit Secrets into Git, Instead Use SSM and Secrets Manager

Terraspace Secrets with AWS: Don’t Commit Secrets into Git, Instead Use SSM and Secrets Manager

January 4, 2022

Tags:

terraform terraspace aws

Committing secrets into your source version control is not a good practice. We'll show you how to use AWS SecretsManager and SSM Parameter Store to store and use secrets safely instead.

Commands

In the video, to focus on learning, we mainly use the AWS Console to create the secrets. Once you get used to it, here are some useful CLI commands:

aws secretsmanager create-secret --name demo-dev-user --secret-string bob
aws secretsmanager create-secret --name demo-dev-pass --secret-string secret
aws secretsmanager list-secrets
aws secretsmanager get-secret-value --secret-id demo-dev-user
aws secretsmanager get-secret-value --secret-id demo-dev-pass
aws secretsmanager delete-secret --force-delete-without-recovery --secret-id demo-dev-user
aws secretsmanager delete-secret --force-delete-without-recovery --secret-id demo-dev-bob

Links:

Terraspace Docs: AWS Secrets
GitHub: boltops-learn/terraspace-aws-secrets

Terraspace Install Guides

8m

1. Docker Install

4:04
2. Standalone MacOSX Install

4:16

Terraspace Terrafile

29m

Terraspace and Terragrunt

19m

1. Migration Overview

6:05
2. Step by Step Migration Guide

13:47

Terraspace Azure Cloud

1h 15m

1. Getting Started with Azure

12:26
2. Network with Registry

6:09
3. Linux Virtual Machine with Registry

6:07
4. Key Vault Secrets

11:18
5. MySQL Database with azurerm_mysql_server

7:54
6. Linux Virtual Machine Scale Set

9:44
7. Load Balancer with Scale Set

10:42
8. AKS Cluster with azurerm_kubernetes_cluster

11:27

Terraspace Google Cloud

1h 12m

1. Getting Started

9:50
2. Network with google_compute_network

8:16
3. Network with Registry

5:11
4. VM with google_compute_instance

6:21
5. Variables with Secret Manager

6:33
6. CloudSQL Database with google_sql_database_instance

3:57
7. Managed Instance Group with Registry

6:26
8. GKE Cluster with google_container_cluster

10:11
9. GKE Cluster with Registry

15:43

Terraspace OnPrem

16m

1. Getting Started Guide

8:58
2. GitLab Backend

7:27

Terraspace Testing

47m

Terraspace Development

24m

1. V1 Release

7:41
2. Azure Plugin Data Protection and Security Features

5:13
3. Armrest REST API Library

7:12
4. Allow and Deny Stacks

4:29

Get full access to these great resources

All for less than the price of coffee a day

44 courses

286 lessons

46+ hours

Get started with BoltOps Learn now and get access to easy and powerful lessons

Get started with BoltOps Learn

BoltOps Tools

Terraspace: The Terraform Framework

It provides an organized structure, conventions over configurations, keeps your code DRY, and adds convenient tooling. Terraspace makes working with Terraform easier and more fun.
Jets: The Ruby Serverless Framework

Ruby on Jets allows you to create and deploy serverless services with ease, and to seamlessly glue AWS services together with the most beautiful dynamic language: Ruby. It includes everything you need to build an API and deploy it to AWS Lambda. Jets leverages the power of Ruby to make serverless joyful for everyone.
AWS CodeBuild Tool

Cody is a AWS CodeBuild management tool. Cody simplifies creating and managing AWS CodeBuild projects. Comes with a powerful DSL.
Lono: The CloudFormation Framework

Building infrastructure-as-code is challenging. Lono makes it much easier and fun. It includes everything you need to manage and deploy infrastructure-as-code.
Kubes: Kubernetes Deployment Tool

Kubes is a Kubernetes Deployment Tool. It builds the docker image, creates the Kubernetes YAML, and runs kubectl apply. It automates the deployment process and saves you precious finger-typing energy.