4 ms·
Some stellar marketing. GC should be offering Vault as a service. No one should be running a critical service like this unless you have a team large enough that
by seanieb 9y ago
Some stellar marketing. GC should be offering Vault as a service. No one should be running a critical service like this unless you have a team large enough that can support it. Frustratingly AWS KMS + Credstash is as close to a managed vault that's available right now.
- sethvargo 9y agoThanks for the feedback. I'll be sure that both our marketing team and product management team receive it :) FD: I work for Google Cloud
- krallja 9y agoHave you tried https://azure.microsoft.com/en-us/services/key-vault/ https://azure.microsoft.com/en-us/services/key-vault/? I haven’t played with it much yet, but it seems to tick the boxes.
- seanieb 9y agoThanks! I'll check it out.
- willejs 9y agoAWS SSM pretty decent as a middle ground.
- seanieb 9y agoOh wow. I had no idea about uts credential store functions. Thanks!
- willejs 9y agoI am using it as a secrets backend for concourse pretty extensively. It's just good enough for that if you lock down the parameters with IAM policies, allowing restrictive get and puts. I am a huge fan of vault, and have run it before when needed though.
- djhworld 9y agoAWS has a solution that awkwardly tucked under the "SSM" product, it's called the Parameter Store. https://aws.amazon.com/systems-manager/features/#Parameter_Store https://aws.amazon.com/systems-manager/features/#Parameter_S... I really don't know why they don't spin it out into a separate product, I honesly had no idea it existed until my colleague just happened to stumble across it