Practical GitOps: Infrastructure Management Using Terraform, AWS, and GitHub Actions

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2023

R. SalechaPractical GitOpshttps://doi.org/10.1007/978-1-4842-8673-9_9

9. Security and Secrets Management

Rohit Salecha¹  

(1)

Mumbai, India

 

In this chapter, we’ll look into various different areas pertaining to the security of our application and infrastructure. We’ll discuss how to manage the database using AWS Secrets Manager and how it can directly be injected into the pods. Then we’ll look at a few small aspects of securing our ALB and restricting the network for the RDS. After that, we’ll look at how pods can authenticate to AWS and access different resources. Then we’ll look at how the disk of the EKS nodes can be encrypted using AWS KMS and how we can ...