<story><title>AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely</title><url>https://aws.amazon.com/blogs/aws/aws-secrets-manager-store-distribute-and-rotate-credentials-securely/</url></story><parent_chain><item><author>whateveracct</author><text>This looks like an AWS equivalent of the Amazon-internal secret management tool called Odin. Which is very nice because Odin was pretty much universally loved from what I saw.</text></item></parent_chain><comment><author>ryanianian</author><text>There&amp;#x27;s still a bootstrap issue with AWS Secrets Manager - you have to set up enough tooling to be able to call the API.&lt;p&gt;The killer-app of odin imho was&amp;#x2F;is the on-machine http server that let all manner of applications very easily get credentials.&lt;p&gt;You could just do something like&lt;p&gt;&lt;pre&gt;&lt;code&gt;  MY_API_KEY=&amp;quot;$(curl http:&amp;#x2F;&amp;#x2F;localhost:5000?key=my-api)&amp;quot;
&lt;/code&gt;&lt;/pre&gt;
and boom your shell script or whatever was very easily using secrets.&lt;p&gt;The fact that Amazon systems bootstrapped EC2 instances meant they could easily enable this org-wide. The odin back-end then owned all the lifecycles around those secrets including what kinds of hosts they would go to, if&amp;#x2F;how they would rotate, etc etc. It has its annoyances including the fact you have to use http to localhost which can get saturated if you&amp;#x27;re not doing things right, but overall it really made secrets-management a non-issue.</text></comment>
<story><title>AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely</title><url>https://aws.amazon.com/blogs/aws/aws-secrets-manager-store-distribute-and-rotate-credentials-securely/</url></story><parent_chain><item><author>whateveracct</author><text>This looks like an AWS equivalent of the Amazon-internal secret management tool called Odin. Which is very nice because Odin was pretty much universally loved from what I saw.</text></item></parent_chain><comment><author>valar_m</author><text>Odin works well, it&amp;#x27;s just a hassle to share credentials with non-developers who don&amp;#x27;t have a dev desktop and therefore can&amp;#x27;t access Odin. It&amp;#x27;s an issue I&amp;#x27;ve encountered several times recently with no clear solution, it seems.</text></comment>