Merge pull request #18 from segudev/patch-1

Use "secrets management" instead of "secret management"

Author: devsecopsguides

docs/production/secret-management.md

@@ -0,0 +1,78 @@
+---
+layout: default
+title: Secrets Management
+parent: Production
+---
+
+{: .no_toc }
+
+## Table of contents
+{: .no_toc .text-delta }
+
+1. TOC
+{:toc}
+
+---
+
+
+# Secrets Management
+{: .no_toc }
+
+
+Secrets management refers to the process of securely storing, managing, and accessing sensitive information, such as passwords, API keys, and other credentials. Secrets are a critical component of modern applications, and their secure management is essential to ensure the security and integrity of the application.
+
+Secrets management typically involves the use of specialized tools and technologies that provide a secure and centralized location for storing and managing secrets. These tools often use strong encryption and access control mechanisms to protect sensitive information from unauthorized access.
+
+Some of the key features of secrets management tools include:
+
+1. Secure storage: Secrets management tools provide a secure location for storing sensitive information, typically using strong encryption and access control mechanisms to ensure that only authorized users can access the information.
+
+2. Access control: Secrets management tools allow administrators to define access control policies and roles that govern who can access specific secrets and what actions they can perform.
+
+3. Auditing and monitoring: Secrets management tools provide auditing and monitoring capabilities that allow administrators to track who accessed specific secrets and when, providing an audit trail for compliance and security purposes.
+
+4. Integration with other tools: Secrets management tools can be integrated with other DevOps tools, such as build servers, deployment tools, and orchestration frameworks, to provide seamless access to secrets during the application lifecycle.
+
+
+## Hashicorp Vault	
+
+A highly secure and scalable secrets management solution that supports a wide range of authentication methods and storage backends.	
+
+```
+vault kv put secret/myapp/config username="admin" password="s3cret" API_key="123456789"
+```
+
+## AWS Secrets Manager	
+
+A fully managed secrets management service provided by Amazon Web Services.	
+
+```
+aws secretsmanager create-secret --name myapp/database --secret-string '{"username":"admin","password":"s3cret"}'
+```
+
+
+## Azure Key Vault	
+
+A cloud-based secrets management service provided by Microsoft Azure.	
+
+
+```
+az keyvault secret set --name myapp/config --value s3cret
+```
+
+## Git-crypt	
+
+A command-line tool that allows you to encrypt files and directories within a Git repository.	
+
+```
+git-crypt init && git-crypt add-gpg-user [email protected]
+```
+
+## Blackbox	
+
+A command-line tool that allows you to store and manage secrets in Git repositories using GPG encryption.	
+
+
+```
+blackbox_initialize && blackbox_register_new_file secrets.txt
+```