Secrets in one place

Every app runs on secrets: API keys, tokens and passwords for the services it talks to. When there's a security breach, all of them have to be rotated, and fast.

That's only quick if you know where every secret lives. When they're spread around, rotating them means hunting each one down, and it's easy to miss one.

I led the work to move all our secrets into AWS. A senior engineer reporting to me did the build.

My part was to make sure it was done well. I oversaw the work, reviewed the solution, and made sure it covered every secret we had and would hold up when we actually needed it.

All our secrets now live in one place in AWS. If there's ever a breach, they can be rotated from there, rather than tracked down one by one.