Securely store DB_URL with Terraform and AWS
suminb opened this issue · comments
Option 1: Hard-code in a Terraform file
Oh, hell no. It ain't gonna happen.
Option 2: DynamoDB
We could dedicate one record in DynamoDB to store DB_URL, but is it worth to introduce additional complexity within our architecture just to accomplish this?
Option 3: S3
Pretty much the same idea as Option 2, but in S3.
Option 4: Embed it in build-time
Embed DB_URL when assembling a Lambda .zip package.
Option 5: Input variables
terraform apply -var db_url=$DB_URL
Option 5 seems like the most plausible solution at the moment...