allow to hide aws keys from kitchen.yml

[JigarJoshi]

it allows to read it from environment variable, it would be nice if it allows to read it from encrypted databags, or some form of encrypted version

[JigarJoshi]

Thanks @mmercer-appneta I thought to do it as well, but it would be nice if it has ability to store encrypted version of keys as part of cookbook and it has ability to decrypt it and use it

[cheeseprocedure]

Sorry about that - had a low blood-sugar moment and missed your mention of env vars :(

[sethvargo]

@JigarJoshi since Test Kitchen is attempting to become less Chef-specific, it is unlikely we will support reading from data bags or the like. Test Kitchen does not even require you have Chef installed on your local system to provision remote instances - Chef is installed at boot time.

Environment variables are the easiest and most flexible solution. This is also in line with how similar tools operate (include Amazon's own Ruby SKD).