DevOps Articles

Securing Your Application Secrets With a Secure Vault

Nowadays, when building applications, we tend to store various application secrets like passwords, API keys, access keys, SSL certificates, and other confidential secrets in order to be able to communicate to various components of the applications. We want our system to be as secured as possible, so we don’t want to store our secret keys and certificates in the system or configurations in a file or something similar like we used to.

To access our secret, all we need to do is to pass the token and secret name to the get_secret_value function: This should print out our application secrets key.

You can easily run this, like below: The next thing to do here is to simply connect this to our main.py. We can update the file: We have updated our: To test this, let's test our first command — order: To get a list of orders, all you need is : To get our Taco order, we can simply extract our id which is in the square bracket ([]) and pass it to the get command: Tada!