Serverless/ Secrets

Secrets

Stored in AWS Secrets Manager and injected into the functions at deploy. Values are never displayed.

KeySecret sourceValueUpdated
APP_KEYacme/production/app-key••••••••14d agocloud secrets:set APP_KEY <value>
DB_PASSWORDacme/production/db••••••••14d agocloud secrets:set DB_PASSWORD <value>
STRIPE_SECRETacme/production/stripe••••••••3d agocloud secrets:set STRIPE_SECRET <value>
MAIL_PASSWORDacme/production/mail••••••••21d agocloud secrets:set MAIL_PASSWORD <value>
cloud secrets:set KEY valuecloud secrets:listcloud env:pull

Secrets are set from the CLI (the dashboard is a read-only static site). Rotate by re-setting; remove with cloud secrets:delete KEY.