Figure out secrets strategy in cloud about cryptorides-karl

[dhvogel]

AWS Secrets Manager is too expensive so I am going to go with the s3 bucket.

AWS Secrets Manager vs S3 Cost Comparison

AWS Secrets Manager

$0.40 per month per secret and $0.05 per 10,000 API calls.

Realistically, $0.45 / month / secret

Let's say I have an OAuth Client Token I need to store for all the APIs I will be using (probably a bunch) and maybe some other secrets (DB Creds, etc.).

It's conceivable to have 10 secrets. This could get pretty costly pretty quickly -- $4.50 / month, just to store secrets. And cost grows with application complexity.

S3 Bucket

$0.023 per GB, $0.005 / 1,000 POST requests, $0.0004 / 1,000 GET requests.

Realistically, $0.0284 / month / unlimited secrets

Summary

Call me a miser but I'd rather just set up an s3 bucket and not pay amazon a ridiculous amount for secret storage.

[dhvogel]

s3 bucket has been set up and secrets are being stored in the bucket. Terraform here: https://github.com/dhvogel/cb-infrastructure