Credstash

Infrastructure

secrets management

SHOW HN2015

Credstash

A tiny python utility for managing secrets in EC2

github.com

#secrets management#ec2#dynamodb#kms#aws

69points
14comments
#397of 2,565 in 2015
Top 16%of 2015 by points

How HN took it

QuietFewer than 5 comments about the project

1 positive, 0 neutral or asking, 0 mixed, 3 critical, out of 4 comments about the project.

Design: 1 for, 2 againstPricing: 0 for, 1 against

The thread, comment by comment

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

What HN said

What people liked

  • DynamoDB is a sound choice over SimpleDB

    From 2 comments
    • SimpleDB is deprecated, more expensive than DDB, and kind of weird to use. Backing your keystore with a deprecated service just sounds like a road to many sleepless nights ;) The…
      _alex_ on HN
    • I think DynamoDB has replaced SimpleDB as the default key-value store if you're running within AWS. For example, even the official Kinesis Client Library will store its state in…
      athrun on HN

Objections

  • Depends on three AWS services, which is a lot for a tiny utility

    From 1 comment
    • Why DynamoDB and not, let's say, SimpleDB? I'm sorry but isn't this "tiny" utility coming with huge requirements indeed?
      kolev on HN
  • SimpleDB status is unclear and it looks neglected

    From 2 comments
    • > SimpleDB is deprecated It actually doesn't appear to be officially deprecated at all, although perhaps it is considered feature complete: http://aws.amazon.com/simpledb/…
      jamiesonbecker on HN
    • The page is still up, and AWS is obviously still running the service (and will as long as customers keep using it), but it's not linked from anywhere. Here's a list of all the…
      _alex_ on HN
  • SimpleDB's 1024-character value limit breaks with encrypted values

    From 1 comment
    • I've gone down that path before of storing encrypted secrets in SimpleDB. Unfortunately, encrypting string values will bloat the length of your strings, bumping against the 1024…
      wuster on HN

Requests

  • Support S3 as a backend

    From 1 comment
    • I am sorry, but how can DynamoDB be cheaper when I have to pay to provision capacity and SimpleDB is practically free for low-volume stuff like this? S3 is probably an even…
      kolev on HN

Questions

  • Why DynamoDB instead of SimpleDB

    From 1 comment
    • Why DynamoDB and not, let's say, SimpleDB? I'm sorry but isn't this "tiny" utility coming with huge requirements indeed?
      kolev on HN
  • Is DynamoDB cheaper than SimpleDB at low volume

    From 2 comments
    • I am sorry, but how can DynamoDB be cheaper when I have to pay to provision capacity and SimpleDB is practically free for low-volume stuff like this? S3 is probably an even…
      kolev on HN
    • DynamoDB is quite inexpensive at low usage levels. The Free Tier gives you: "25 GB of Storage, 25 Units of Read Capacity and 25 Units of Write Capacity – Enough to handle up to…
      athrun on HN

Alternatives named

  • SimpleDB

    From 1 comment
    • Why DynamoDB and not, let's say, SimpleDB? I'm sorry but isn't this "tiny" utility coming with huge requirements indeed?
      kolev on HN
  • S3

    From 1 comment
    • I am sorry, but how can DynamoDB be cheaper when I have to pay to provision capacity and SimpleDB is practically free for low-volume stuff like this? S3 is probably an even…
      kolev on HN

Category, keywords, summaries and labels on this page were made by AI (Thread Reader v2) and not checked by hand. Each point links to the comments it came from.

Add a badge to your READMEShown on HackerShow
[![Shown on HackerShow](https://hackershow.org/badge.svg)](https://hackershow.org/show/9420003)