ParentFull threadIxiaus·Use kms and dynamodb with key enveloping, or this tool: https://github.com/fugue/credstashDon't initialize into env vars and don't store in repos, even private ones.View on HN