AWS and secrets (Systems Manager, Secrets Manager, Key Management Service)

Question

As AWS has now retired the KMS service it seems the Secrets Manager took over.

As it is quite costly there is also the Systems Manager parameter store.

None of these has audit capabilities as far as I see.

Does anybody know the roadmap or what to use for which use case?

Answer 1

The AWS Key Management Service (KMS) is an encryption and key management service. It has certainly not been retired , and is used to manage encryption keys for services such as Amazon S3, Amazon EBS, Amazon RDS, Amazon Redshift and Amazon EMR.

The AWS Systems Manager Parameter Store provides secure, hierarchical storage for configuration data management and secrets management. In fact, the Parameter Store uses AWS KMS to manage encryption keys.

The AWS Secrets Manager makes it easier to manage secrets, including automated password rotation (in-built for Amazon RDS, or utilizing AWS Lambda for other systems).

All of these services provide Auditing via AWS CloudTrail .