Extra Credit

Secrets Management Patterns

Official docs outline

8 sections
  1. OWASP Secrets Management

    Centralization, rotation, least privilege and incident response for secrets.

  2. AWS Secrets Manager

    Storing, retrieving and rotating secrets in AWS.

  3. Secrets Manager Rotation

    Automatic rotation using Lambda functions.

  4. Systems Manager Parameter Store

    Hierarchical configuration and secure string parameters.

  5. Kubernetes Secrets Good Practices

    Handling Secrets in Kubernetes safely.

  6. Workload Identity Federation

    Replacing static credentials with federated short-lived tokens.

  7. NIST SP 800-57 Key Management

    Key management lifecycle and cryptoperiod recommendations.

  8. AWS KMS Envelope Encryption

    Protecting secrets with data keys wrapped by KMS.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

All 9