Pass

These days there are plenty of password managers out there, all providing the same base promise; making you more secure by using random password for each of the accounts you have. Obviously this has one caveat, where you have “all eggs in one basket”. If this account gets compromised, attacker would have access to all of your credentials. Debating pros and cons and what is best for general population though is beyond the scope of this article. Let’s just say I’m firmly on the side for password managers, because alternatives suck. ...

There is this nice utility which helps you with managing AWS credentials called aws-vault. It is quite nice to use it as it allows ad-hoc login as a specific profile via web browser, without the need for entering your credentials or performing 3 step process to log in, just: aws-vault login profile Where “profile” is specific AWS profile, and voila, you’re in. Besides that, it also keeps your credentials safe in one of the supported backends. Personally I use MacOS keychain which is default on MacOS for saving credentials, but on my personal rigs, which all run linux, I prefer to have credentials in Password Store. That way I can sync credentials accross machines easily as well as manage and track them on the central place as I usually do with all my passwords. ...