Hacker News new | ask | show | jobs
by AndrewWright 3887 days ago
Another alternative developed for AWS deployments, written in Python and uses KMS: Credstash https://github.com/fugue/credstash
1 comments
ryan_lane 3887 days ago
The only downside of credstash is that it doesn't have the ability to restrict sets of credentials to different IAM roles. The access is all-or-nothing, per dynamo table.

Otherwise the general design of credstash is very similar to Confidant.

link
vogan_mother 3886 days ago
It is possible to use fine grained access control with dynamodb in order to restrict access within a ddb table
link