Talking Drupal #405 - Secrets Management

Today we are talking about Secrets Management with Dwayne McDaniel.

For show notes visit: www.talkingDrupal.com/405

Topics

• What is new with you?
• Secrets Management
• Why it is important
• Best practices
• Secrets in Drupal
• Common errors
• What does rotating mean
• Best way to rotate
• How often should you rotate
• Git Guardian

Resources

• Talking Drupal 187 - Dwayne McDaniel
• MidCamp
• GitKraken
• Git Guardian
• Lockr
• Hashicorp
• Uber key leak
• Toyota
• AstraZeneca
• Verizon dbir databreach
• Azure keyvault youtube video
• Have I Been Pwned
• State of secrets report
• Dark reading
• Repl.it
• Key Drupal Module
• Lockr Drupal Module
• akeyless

Hosts

Nic Laflin - www.nLighteneddevelopment.com @nicxvan John Picozzi - www.epam.com @johnpicozzi Sean T. Walsh - @seantwalsh

MOTW Correspondent

Martin Anderson-Clutz - @mandclu Security Review Automatically tests for many easy-to-make site configuration and setup mistakes that can make a Drupal site insecure.