dynamo_secret

Ruby gem for encrypting secrets with GnuPG and/or KMS and storing them in DynamoDB.

dynamo_secret can be used to store, fetch, update, and delete encrypted information. It is intended to be used as a remote password store, but could be used for other things as well. Data is organized by site, and can contain almost anything. Usage:

dynamo_secret -l|--list
dynamo_secret -i|--init   [-k|--kms]
dynamo_secret -g|--get    [site] [key1,key2,...]
dynamo_secret -a|--add    [site] [key1,key2,...] [val1,val2,...]
dynamo_secret -u|--update [site] [key1,key2,...] [val1,val2,...]
dynamo_secret -d|--delete [site]

dynamo_secret -l will list all of the sites stored in the DynamoDB table.

Before storing secrets the table needs to be created. dynamo_secret -i [-k] will create the table. If the optional -k flag is supplied a KMS key will also be created. KMS keys do not qualify for free tier usage and will cost $1 or more per month.

dynamo_secret -g|--get [site] [key1,key2,...] will retreive and decrypt information stored under the specified site. Specific fields (keys) can also be specified if not all fields are wanted or required.

dynamo_secret -a|--add [site] [key1,key2,...] [val1,val2,...] stores key value pairs under site. Values may be omitted to keep them out of history files, or - may be used for extra sensitive secrets.

dynamo_secret -u|--update works exactly like --put, but it replaces the specified key value pairs while keeping anything else.

dynamo_secret -d|--delete [site] completely removes all records under site from the DynamoDB table.