search

wso2 / product-is

Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
http://wso2.github.io/
Apache License 2.0
727 stars 711 forks source link

Supporting secret management service from cloud vendors #7376

Open ajanthan opened 4 years ago

ajanthan commented 4 years ago

Currently, secret management is done through the WSO2 securevault in the identity server. Nowadays, almost all of the cloud vendors are having secret management service[1][2][3]. Identity server should support storing secrets(such as DB password, LDAP password, Keystore password ..etc) in the cloud secret managers.

[1] https://aws.amazon.com/secrets-manager/ [2] https://azure.microsoft.com/en-us/services/key-vault/ [3] https://cloud.google.com/blog/products/identity-security/introducing-google-clouds-secret-manager

AmshikaH commented 2 years ago

An extension has been developed to use Azure Key Vault as an external secret repository with Carbon Secure Vault.

Lakshan-Banneheke commented 2 years ago

An extension to support AWS Secrets Manager as an external secret repository in Carbon Secure Vault has been developed.