tmobile / pacbot

PacBot (Policy as Code Bot)
https://tmobile.github.io/pacbot/
Apache License 2.0
1.29k stars 277 forks source link

KMS Secret Management/ Parameter Store for Database Credentials #36

Open jonshern opened 6 years ago

jonshern commented 6 years ago

🙋 feature request

When i look into the ECS Console for each container The RDS Password and Redshift Password are in plain text Not a super big deal since the environment is built into an internal vpc. But anyone who has AWS Access and access to the internal network could get at the credentials. Best Practices would be to store this in Parameter Store

🤔 Expected Behavior

These values should be stored in a KMS / Parameter Store and looked up via key.

Aha! Link: https://t-mobile1t-mobile.aha.io/features/PM-310

johnakash commented 6 years ago

It seems to be a good suggestion and we will be definitely look in to this.