Secrets Management

Canary Tokens

• Generate Canarytokens
• TruffleHog Now Detects AWS Canaries without setting them off ◆ Truffle Security Co.

Where can you store source code?

From bad to okay to amazing practices - Source Code - Environment Variables - Configuration management vaults, i.e, ansible vault - Secrets Management Solution

Components of Secrets Management Solutions

• secrets backend
• auth backend
• audit backend