TechPrufer
Get started
PlanetScale
PlanetScale logoPlanetScale · Feature trail

Secure Credential Management with AWS KMS

1 post · Dec 2022

What this trail covers

This post introduces a method for securely managing sensitive database credentials, such as PlanetScale connection strings, by leveraging AWS Key Management Service (KMS) to encrypt environment variables used within AWS Lambda functions. This enhances security by preventing direct exposure of credentials in code or standard environment variables.

All PlanetScale trails
  1. Secure your connection string with AWS KMSThis post details the process of integrating AWS KMS for encrypting and decrypting sensitive connection strings within an AWS Lambda function. It covers creating a Go-based Lambda function to interact with a PlanetScale database, setting up a customer-managed key in AWS KMS, encrypting the database DSN environment variable, and modifying the Lambda function to decrypt the DSN at runtime before establishing a database connection. It also includes steps for building and deploying the Lambda function.