Answers: <p>Well there are a lot of places to keep them secure </p>
  
  <ul>
  <li><p>you can use something like hashicorp vault to keep those kind of secrets </p></li>
  <li><p>you can use something like lastpass and my personal favorite is enpass </p></li>
  </ul>
  
  <p>But first you need to define your needs so you can choose the right tool to use and integrate with your daily use </p>
  
Answers: CC BY-SA 4.0
Answers: 2019-03-14T16:28:00.940Z
Answers: 2019-03-14T16:28:00.940Z
Answers: Kerolos William
Answers: <p>Keepas can be another option where you can store your secret keys/passwords .
  Here is the document document for your reference : <a href="https://aws.amazon.com/marketplace/pp/prodview-wr72ujcv4dhmo" rel="nofollow noreferrer">https://aws.amazon.com/marketplace/pp/prodview-wr72ujcv4dhmo</a></p>
  
Answers: CC BY-SA 4.0
Answers: 2022-03-24T17:27:09.253Z
Answers: 2022-03-24T17:27:09.253Z
Answers: Kunal
Answers: <p>In case you can provision the IAM accounts programmatically, for example using Terraform, you could ask users for their PGP public keys (or fetch them from company's PGP server) and encrypt their credentials immediately upon provisioning with PGP.</p>
  <p>You can then safely distribute the encrypted credentials to the user, however you see fit, store them in Keepass/1password/other password manager where you can share them with the users, or just leave the encrypted credentials in CI pipeline and send them via encrypted private messenger without compromising security.</p>
  
Answers: CC BY-SA 4.0
Answers: 2022-03-27T00:36:03.020Z
Answers: 2022-03-27T00:36:03.020Z
Answers: David Lukac
Body: <p>When creating a new user in AWS IAM, it generates access keys for that user. Where is a secure and readily accessible location to store these credentials?</p>
  
Comments: CC BY-SA 4.0
Comments: 2019-03-15T08:29:44.927Z
Comments: We need more information about those users. Those IAM users are managed by real users or 3rd party users? are integrated into some automatic processes, CD pipelines...?
Comments: RuBiCK
Tags: <aws-iam>
Title: What is a secure way for storing AWS IAM credentials?
UserDisplayName: Daniel
ThreadText: # What is a secure way for storing AWS IAM credentials?
  
  (Asked by: username_0 on 2019-03-14)
  
  When creating a new user in AWS IAM, it generates access keys for that user. Where is a secure and readily accessible location to store these credentials?
  
  **Tags:** aws-iam
  
  > **Comments:**
  > **username_1**: We need more information about those users. Those IAM users are managed by real users or 3rd party users? are integrated into some automatic processes, CD pipelines...?  
  
  ---
  
  ## 3 answers
  
  ### Answer by username_2 on 2019-03-14. Score: 1 | Accepted answer
  
  Well there are a lot of places to keep them secure
  
  * you can use something like hashicorp vault to keep those kind of secrets
  * you can use something like lastpass and my personal favorite is enpass
  
  But first you need to define your needs so you can choose the right tool to use and integrate with your daily use
  
  
  ---
  
  ### Answer by username_3 on 2022-03-24. Score: 0
  
  Keepas can be another option where you can store your secret keys/passwords .
  Here is the document document for your reference : <https://aws.amazon.com/marketplace/pp/prodview-wr72ujcv4dhmo>
  
  
  ---
  
  ### Answer by username_4 on 2022-03-27. Score: 0
  
  In case you can provision the IAM accounts programmatically, for example using Terraform, you could ask users for their PGP public keys (or fetch them from company's PGP server) and encrypt their credentials immediately upon provisioning with PGP.
  
  You can then safely distribute the encrypted credentials to the user, however you see fit, store them in Keepass/1password/other password manager where you can share them with the users, or just leave the encrypted credentials in CI pipeline and send them via encrypted private messenger without compromising security.
  
  
  ---
  
  