Overview
Learn how to transition from risky .env files to secure secret management in this 23-minute video tutorial. Discover why storing sensitive data like AWS credentials, database passwords, API keys, and JWT tokens in .env files poses significant security risks. Explore Pulumi ESC (Encrypted Secrets Management) as a modern, secure alternative that provides end-to-end encryption, dynamic credential fetching, and comprehensive auditing capabilities. Follow along with a practical demonstration integrating Pulumi ESC with AWS and Terraform, including step-by-step configuration, CLI usage for dynamic AWS credential management, and real-time secret handling without hardcoding sensitive data. Master essential security practices for cloud and infrastructure projects while maintaining efficient workflows through hands-on examples and detailed explanations of encryption, access control, and secret rotation strategies.
Syllabus
STOP Using .env Files for Secrets NOW!
Taught by
Rahul Wagh