<p>Well there are a lot of places to keep them secure </p>

<ul>
<li><p>you can use something like hashicorp vault to keep those kind of secrets </p></li>
<li><p>you can use something like lastpass and my personal favorite is enpass </p></li>
</ul>

<p>But first you need to define your needs so you can choose the right tool to use and integrate with your daily use </p>

CC BY-SA 4.0
2019-03-14T16:28:00.940Z
2019-03-14T16:28:00.940Z
Kerolos William
<p>Keepas can be another option where you can store your secret keys/passwords .
Here is the document document for your reference : <a href="https://aws.amazon.com/marketplace/pp/prodview-wr72ujcv4dhmo" rel="nofollow noreferrer">https://aws.amazon.com/marketplace/pp/prodview-wr72ujcv4dhmo</a></p>

CC BY-SA 4.0
2022-03-24T17:27:09.253Z
2022-03-24T17:27:09.253Z
Kunal
<p>In case you can provision the IAM accounts programmatically, for example using Terraform, you could ask users for their PGP public keys (or fetch them from company's PGP server) and encrypt their credentials immediately upon provisioning with PGP.</p>
<p>You can then safely distribute the encrypted credentials to the user, however you see fit, store them in Keepass/1password/other password manager where you can share them with the users, or just leave the encrypted credentials in CI pipeline and send them via encrypted private messenger without compromising security.</p>

CC BY-SA 4.0
2022-03-27T00:36:03.020Z
2022-03-27T00:36:03.020Z
David Lukac
<p>When creating a new user in AWS IAM, it generates access keys for that user. Where is a secure and readily accessible location to store these credentials?</p>

CC BY-SA 4.0
2019-03-15T08:29:44.927Z
We need more information about those users. Those IAM users are managed by real users or 3rd party users? are integrated into some automatic processes, CD pipelines...?
RuBiCK
<aws-iam>
What is a secure way for storing AWS IAM credentials?
Daniel
# What is a secure way for storing AWS IAM credentials?

(Asked by: username_0 on 2019-03-14)

When creating a new user in AWS IAM, it generates access keys for that user. Where is a secure and readily accessible location to store these credentials?

**Tags:** aws-iam

> **Comments:**
> **username_1**: We need more information about those users. Those IAM users are managed by real users or 3rd party users? are integrated into some automatic processes, CD pipelines...?  

---

## 3 answers

### Answer by username_2 on 2019-03-14. Score: 1 | Accepted answer

Well there are a lot of places to keep them secure

* you can use something like hashicorp vault to keep those kind of secrets
* you can use something like lastpass and my personal favorite is enpass

But first you need to define your needs so you can choose the right tool to use and integrate with your daily use


---

### Answer by username_3 on 2022-03-24. Score: 0

Keepas can be another option where you can store your secret keys/passwords .
Here is the document document for your reference : <https://aws.amazon.com/marketplace/pp/prodview-wr72ujcv4dhmo>


---

### Answer by username_4 on 2022-03-27. Score: 0

In case you can provision the IAM accounts programmatically, for example using Terraform, you could ask users for their PGP public keys (or fetch them from company's PGP server) and encrypt their credentials immediately upon provisioning with PGP.

You can then safely distribute the encrypted credentials to the user, however you see fit, store them in Keepass/1password/other password manager where you can share them with the users, or just leave the encrypted credentials in CI pipeline and send them via encrypted private messenger without compromising security.


---

