{"repo":"binxio/cfn-secret-provider","free":true,"listed":false,"github":"https://github.com/binxio/cfn-secret-provider","clone":"git clone https://github.com/binxio/cfn-secret-provider.git","description":"A CloudFormation custom resource provider for deploying secrets and keys","language":"Python","stars":144,"topics":["aws-cloudformation","aws-ssm","credentials","deployment","rsa-key","keypair","aws"],"license":"Apache-2.0","category":"deployment-docker-iac","readme_excerpt":"cfn-secret-provider A CloudFormation custom resource provider for managing secrets, private keys and EC2 key pairs. One of the biggest problems I encounter in creating immutable infrastructures, is dealing with secrets. Secrets must always be different per environment and therefore parameterized. As we automated all the things passwords often end up in parameter files and have to pass them around to people and applications: This is not a good thing. With this Custom CloudFormation Resource we put an end to that. Secrets are generated, stored in the EC2 parameter store and access to the secrets can be controlled through security policies. How do I generate a secret? It is quite easy: you specify a CloudFormation resource of the Custom::Secret, as follows: After the deployment, a 30 character random string can be found in the EC Parameter Store with the name /demo/PGPASSWORD . If you need to access the secret in your cloudformation module, you need to specify ReturnSecret and reference it as the attribute Secret . How do I add a private key? In the same manner you can specify a RSA private key as a CloudFormation resource of the Custom::RSAKey: After the deployment, a the newly generated private key can be found in the EC2 Parameter Store under the name /demo/private-key : If you need to access the public key of the newly generated private key, you can reference it as the attribute PublicKey . Most likely, you would use this in the Custom::KeyPair resource, to create a EC2 key ","default_branch":null,"files":null,"tree":[],"storefront":"/r/binxio","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/binxio/cfn-secret-provider/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}