I released params2env, a Go based CLI tool I've built that reads AWS SSM Parameter Store values and sets them as environment variables.

The tool can create, modify, and delete parameters, and supports optional cross-region replication for redundancy.

Read more on my blog: https://dominik.wombacher.cc/posts/params2env-aws-ssm-parameter-store-to-environment-variables.html

#AWS #Go #GoLang #CLI #OpenSource #ParameterStore #DevOps #SecretManagement

params2env: AWS SSM Parameter Store to Environment variables

A Go CLI tool to manage AWS SSM Parameter Store parameters and convert them to environment variables

The Wombelix Post
Upon prompting from my buddy at GH, wanted to check out #Github Access using #OpenID Connect (OIDC). Today, I covered setting up federated #OIDC to #Azure, #AWS and #GCP. In all three cases, I tackled secrets using #AKV, #ParameterStore and #SecretsManager, respectively. The key feature of OIDC is the use of OAuth flow; meaning no persisted Access Secret needs to be in your #CI for #Cloud access. https://freshbrewed.science/2023/02/09/gh-secrets.html
Github Workflows with OIDC Cloud Access: Secrets without Secrets

Recently, my colleague at Github pointed out that my method for accessing GCP and Azure was fine, but perhaps a bit dated. There are new ways using OpenID Connect that do not require one to create Service Principals Secret Access Keys that can be used to connect.

Fresh/Brewed