Generic templated configuration management for Kubernetes, Terraform and other things

Secure Secret management for Kubernetes (with gpg, Google Cloud KMS and AWS KMS backends)

AWS S3 & KMS integration for ASP.NET Core data protection

A mock version of AWS' Key Management Service, for local development and testing.

Handle secrets in Docker using AWS KMS, SSM parameter store, Secrets Manager, or Azure Key Vault

A Serverless 1.x plugin to manage environment variables with YAML and turn them into a .env file on deployment. Supports encryption with KMS, multiple stages and custom profiles.

Encrypted environment variables via AWS KMS

Securely populate environment variables using KMS/SSM/Secrets manager on AWS.

🔐 Convenience wrapper & CLI around the AWS Node.js SDK to make encrypting/decrypting secrets with the AWS KMS service a one-liner. Suitable for use with AWS Lambda.

🔐 This repository contains the example code for the blog post "Painlessly storing security sensitive data using AWS KMS and OpenSSL"

Manage your application secrets safe & easy

A command-line tool that uses AWS KMS to encrypt secrets once, and decrypts them from multiple AWS regions.

A KMS-powered ssh-agent (and its underlying Golang package)

🕵️‍♀️ Expose secrets to your buildkite build steps via Amazon S3

Certonid is a Serverless SSH Certificate Authority

A simple, single binary to get AWS SSM parameters -- for ECS / Docker usage

How to create an AMI with root_device encrypted using Terraform

Need to store secrets in your repo? gcy!

Go wrapper for credstash secret store

Serverless Framework plugin to create and revoke AWS KMS grants during serverless deploy/remove.

AWS KMS Web3 provider. The provider can sign the transaction using Asymmetric Keys of AWS Key Management Service without managing a private key.

Enables secure storage of credentials right in your git repo using AWS KMS.

Linux disk encryption through the integration of LUKS with AWS KMS

Store AWS KMS encrypted secrets in your repo

The Eonian Secrets Locker provides in-app decryption of encrypted secrets at runtime. Encrypted secrets can be on the class path, the file system, or in AWS S3. Secrets are decrypted into Java Strings or Properties. Their plaintext is not written to disk. The library provides interfaces which can be implemented by different encryption providers.

Utilities for interacting with the AWS SDKs from Scala

Ansible playbook and CloudFormation template for deploying supporting CloudFormation resources

AWS Lambda Function for provisioning secrets into the EC2 Systems Manager Parameter Store

A Kubernetes controller to apply AWS KMS encrypted secrets as it is

A Simple Client to the AWS Key Management Service