{"repo":"aws/aws-workload-credentials-provider","free":true,"listed":false,"github":"https://github.com/aws/aws-workload-credentials-provider","clone":"git clone https://github.com/aws/aws-workload-credentials-provider.git","description":"The AWS Workload Credentials Provider (formerly the AWS Secrets Manager Agent) is a client-side solution that helps you standardize how you consume credentials from AWS services across your compute environments.","language":"Rust","stars":702,"topics":["agent","aws","aws-secrets-manager","secretsmanager","caching","rust","acm","aws-certificate-manager","certificates"],"license":"Apache-2.0","category":"deployment-docker-iac","readme_excerpt":"AWS Workload Credentials Provider The AWS Workload Credentials Provider (formerly the AWS Secrets Manager Agent) is a client\\-side solution that helps you standardize how you consume credentials from AWS services across your compute environments\\. It includes the following capabilities: - Secrets Manager — An HTTP interface for retrieving and caching secrets from AWS Secrets Manager\\. Supported on AWS Lambda, Amazon ECS, Amazon EKS, and Amazon EC2\\. Enabled by default\\. - Certificate Management — Automatic export and refresh of certificates from AWS Certificate Manager to the local filesystem\\. Supported on Amazon EC2 and on\\-premise hosts\\. Opt\\-in via configuration\\. Secrets Manager capability The Workload Credentials Provider retrieves and caches secrets in memory so that your applications can consume secrets from localhost instead of making direct calls to Secrets Manager\\. It can only read secrets \\- it can't modify them\\. The Workload Credentials Provider uses the AWS credentials you provide in your environment to make calls to Secrets Manager\\. The Workload Credentials Provider offers protection against Server Side Request Forgery \\(SSRF\\) to help improve secret security\\. It also uses the post-quantum ML-KEM key exchange as the highest-priority key exchange by default\\. You can configure the Workload Credentials Provider by setting the maximum number of connections, the time to live \\(TTL\\), the localhost HTTP port, and the cache size\\. Because the Workload Credential","default_branch":null,"files":null,"tree":[],"storefront":"/r/aws","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/aws/aws-workload-credentials-provider/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}