Thanks for the tutorial! In this case, the EC2 has a role attached to access to the Secrets Manager? How can I protect the Secrets Manager to only accept connections from a particular machine? Thank you :)
Is the process same for the PostgreSQL? Actually I was unable to deploy my application (django todo app).Bcoz, my credentials are in .env file (environment variable) and its not included in the image which is uploaded in ECR. (problem where to keep my .env in AWS && how to connect .env AND db while deployment). Your guidance will be remembered forever.
Hi, yes, process almost similar for any RDS DB engine. You have 3 options to configure 1. Use Parameter store to store sensitive info and access it from ec2/ecs. 2. Store it in secrets manager and access it from your application. 3. if you are using batch to process your ecr image, you can configure your info as Environment variables.
@@avizway Thanks so much for this precious info!! I would like to go with Parameter Store,, but for that I need guidance or tutorial. As a beginner AWS seems to be divided in various services. (Many things to be touched in sequence) Otherwise, I've to opt for paid AWS support.
Thanks for the tutorial! In this case, the EC2 has a role attached to access to the Secrets Manager? How can I protect the Secrets Manager to only accept connections from a particular machine? Thank you :)
Encrypt the secreta using a kms cmk and provide access to only specific role to decrypt the Secret.
Is the process same for the PostgreSQL? Actually I was unable to deploy my application (django todo app).Bcoz, my credentials are in .env file (environment variable) and its not included in the image which is uploaded in ECR. (problem where to keep my .env in AWS && how to connect .env AND db while deployment). Your guidance will be remembered forever.
Hi, yes, process almost similar for any RDS DB engine.
You have 3 options to configure
1. Use Parameter store to store sensitive info and access it from ec2/ecs.
2. Store it in secrets manager and access it from your application.
3. if you are using batch to process your ecr image, you can configure your info as Environment variables.
@@avizway Thanks so much for this precious info!! I would like to go with Parameter Store,, but for that I need guidance or tutorial. As a beginner AWS seems to be divided in various services. (Many things to be touched in sequence) Otherwise, I've to opt for paid AWS support.