Secret Store - SecretProviderGet()

There was talk of having a secret store in lucee in pre-6.x - just wondering what came of that and if there is any current recommendations for vendor-neutral solutions.

I did find this java one that is looking good (alternative to expensive HashiCorp Vault) : DelineaXPM/tss-sdk-java: A Java SDK for Delinea Secret Server (github.com) - anyone use this or can suggest something they use in devops/production?

anyone using a secret store INSIDE cfadmin? (aka populate passwords using server.cfc from external secret store server/service)

I’m assuming most are using per application secrets. What are people using? (aws/azure/delinea/vault??)

Lucee 7 introduces support a range of secret managers

https://luceeserver.atlassian.net/browse/LDEV-5517

2 Likes

#killer… you rock!

v7’s best kept secret #dadjoke

oh dear, I’m pregnant again! (twice in one week) #lol

Missing Azure Key Vault (aws/google/docker…{azure}) is proposed key store provider (coming soon) :wink:

Key Vault | Microsoft Azure

Azure-Samples/key-vault-java-authentication: This sample repo includes sample code demonstrating a common mechanism for authenticating to an Azure Key Vault vault.