Storing arbitrary secret data with profiles

[coen-hyde]

This is probably outside the scope of aws-vault but I would like to store other data along side the aws profile. In my use case this would be an auth token to another service related to the aws profile. I only want this token exposed once credentials have been successfully created. What are your thoughts?

[lox]

Store it in s3?

[coen-hyde]

That's not a bad idea. With the appropriate policies and acl it should be safe. But it doesn't feel right, let me think about this :). Cheers.

[lox]

Alternately, KMS + S3: https://github.com/codahale/sneaker

[lox]

https://github.com/fugue/credstash is another alternative that uses DynamoDB. It looks like the best fit for what you are looking for.

[coen-hyde]

I'm just going to pgp encrypt the data. Thanks for the links