Managing secrets in Terraform and Terragrunt

This course is going to present you various approaches to handle secrets in Terraform and Terragrunt setups.

Hiding secrets is important because it helps prevent unauthorized access to sensitive information. In your day to day work you might be working with API keys, tokens, password, credentials to database etc.

By hiding secrets, you can ensure that only authorized users and applications have access to them, and that they are not exposed to potential attackers. This can help improve the security of your systems and reduce the risk of data breaches and other security incidents. Limiting access to secrets to dedicated teams, you can also reduce the risk of accidental exposure or misuse of sensitive information. Additionally, dedicated teams can ensure that secrets are properly rotated and managed over time, which is critical for maintaining the security of your systems and data.

My goal for this course is to provide you with the knowledge and tools necessary to effectively manage secrets in your Terraform and Terragrunt projects. I hope you will find solution that fulfill your needs.

We will evaluate the advantages and disadvantages of each of these methods, and then shift our attention to their practical implementation.

Our lessons will focus on:

• Securing Terraform state backend

• Hiding secrets in output

• Environment variables

• AWS Secret Manager (and any other Cloud Secret Manager)

• Hashicorp Vault

• File encryption using AWS KMS service

• File encryption using git-crypt

• File encryption using SOPS