A secrets management service that stores encrypted secrets in DynamoDB with secure access controls.
Confidant is a secrets management service that securely stores sensitive data like API keys and passwords in encrypted form. It solves the problem of managing credentials in infrastructure by providing encrypted storage in DynamoDB with comprehensive access controls and audit logging.
DevOps engineers and infrastructure teams managing cloud environments who need secure, auditable storage for credentials and secrets across services.
Developers choose Confidant for its tight integration with AWS services, self-hosting capability, and security-focused design that includes encryption at rest with KMS and detailed audit trails.
Confidant: your secret keeper. https://lyft.github.io/confidant
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Uses AWS KMS to encrypt all secrets before storage in DynamoDB, ensuring robust protection against data breaches as highlighted in the key features.
Implements fine-grained permissions and authentication mechanisms, allowing precise management of who can access or modify secrets, which is crucial for compliance.
Provides detailed logs of all access and changes, facilitating security audits and tracking as per the audit logging feature.
Offers a web UI and API for users to manage secrets independently, reducing administrative burden and enabling efficient workflow.
Marked as archived in February 2025, meaning no new features, bug fixes, or security updates will be provided, posing long-term risks for production use.
Heavily reliant on AWS-specific services like KMS and DynamoDB, making migration difficult and limiting deployment flexibility in multi-cloud or on-premise setups.
Requires setup and configuration with AWS infrastructure, which can be time-consuming and complex compared to managed alternatives like AWS Secrets Manager.
confidant is an open-source alternative to the following products:
AWS Secrets Manager helps you protect secrets needed to access your applications, services, and IT resources, enabling you to rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.
HashiCorp Vault is a secrets management tool that securely stores, accesses, and manages sensitive data like API keys, passwords, and certificates.