AWS secrets manager?

[hopewise]

Currently we use Capistrano to deploy our app to AWS, which we can handle to symlink config/settings/production.yml, however, we are studying the possibility of using AWS Fargate, and it seems that AWS Secrets Manager is recommended when using Fargate.

Not to mention that maximum secret size for AWS Secrets Manager in 10kb, while our production.yml size is about 50kb, I will have to re-fill it in multiple secrets .. there must be work around for this..

The question is, what's the possibilities to use AWS Secrets Manager to populate the settings behind the scenes rather than relying on files at for ex: config/settings/production.yml ? so that we keep our code not changed, ex: Settings.stripe.publishable_key ?

[pkuczynski]

I think the easiest option would be to expose secrets from AWS Secrets Manager to Config using environment variables. Have a look at https://github.com/rubyconfig/config#working-with-environment-variables to see how to automatically populate ENV into settings

[pkuczynski]

And if you find something which is not mentioned in the documentation, please share it with the community via pull request to README :)

[hopewise]

Thanks, considering aws pricing $0.4 per a secret, its too expensive comparing to the number of secrets we have! I will group them into groups, but that will push top level settings in the Settings tree one level down .. breaking the current settings access path we have, I am thinking about it though..

[cjlarose]

A fix for this was implemented in #299 and released in config version 3.0.0.