How to handle secrets in AWS Codebuild

5 years ago medium.com

Summary: This is a summary of an article originally published by the source. Read the full original article here →

You have a CodeBuild project that build you static site from headless CMS and you need the access token to call the API. You are smart enough to know that hardcoding it directly in source code is not a good idea.

This works but has couple downsides: AWS has a service to securely store passwords, tokens, credentials or any other sensitive data — AWS Secrets Manager.

Values from Secrets Manager can be mapped out to environment variables that will be available through all build project phases.

NOTE: Of course IAM role associated with CodeBuild project has to have sufficient permissions to access secretsOriginally published at https://mpasierbski.com.

DevOps Articles