Secrets management - AWS Prescriptive Guidance

Secrets management

When you develop applications by using .NET, you need to store secrets such as application ID, application secret, and database connection strings. These secrets and connection strings are stored in appsettings.json or web.config. Developers typically add these configuration files to a public repository, which increases the risk of a security breach. You can mitigate this risk by using AWS Secrets Manager and Parameter Store, which help you securely store and retrieve these values for your application. The following sections explain how you can configure Secrets Manager and Parameter Store for your .NET Framework applications.