Real World DevOps: Securely Managing Credentials In Applications

Get the DevOps Roadmap for 2022 here: devopsfordevelopers.io/roadmap
Every app has some type of credentials to be managed. Database passwords, API keys, 3rd party services, and more. So how to you securely get these into your app without comprimising them?
In this video you will learn 4 different ways to tackle this:
- CLI arguments
- Environment Variables
- .env files
- Using a secrets manager like AWS or Hashicorp Vault
We'll cover the pros and cons of each and I'll show you how I implemented it in the new app I'm building, leetproof.com.
----------🎥 C H A P T E R S ----------
0:00 Introduction
0:44 Using command line arguments
1:31 Setting via environment variables
2:37 .env or credential files
3:32 Pulling secrets from a secrets manager
5:10 Securing access to secrets manager
5:34 Rotating credentials (a good thing to make easy)
6:17 Mitigating concerns
----------👋 C O N N E C T ----------
Discord ▻ devopsfordevelopers.io/discord
Twitter ▻ / wfbutton
----------🛠 R E S O U R C E S ----------
The DevOps Career Guide ▻ devopsfordevelopers.io/devops...
DevOps Roadmap ▻ devopsfordevelopers.io/roadmap
DevOps merch ▻ devopsfordevelopers.io/merch

[@DevOpsForDevelopers]

The DevOps Roadmap for 2022 is available for free at devopsfordevelopers.io/roadmap
One of the hardest things about learning is understanding how the different components work together. Using this guide, you start with a topic that interests or relates to you. At the end of the section, other related topics are shown allowing you to pick and choose your own path to DevOps mastery.
Check it out and leverage the skills you learn to advance your career as a developer, sysadmin, IT Operations, QA and more!

[@lukesemail6980]

Funny how this comes out as our team is talking about this! Thank you for the tips!

[@DevOpsForDevelopers]

That's some nice timing right there!!

[@taniaduggal6459]

Thanks for providing valuable content❤️

[@DevOpsForDevelopers]

You’re welcome!

[@MKMike]

Thanks! would be glad if you could do a video about high availability postgres cluster, I can't find a proper doc online

[@DevOpsForDevelopers]

Great suggestion!