Hacker News Reader

Dumb question, but, does WordPress support a dynamic credential manager like Vault or Secrets Manager? Afaik you have to hard code plaintext secrets (such as for the DB) in a .php file?

View on HN

Natively, no, but not impossible:

https://www.rayheffer.com/aws-secrets-manager-for-wordpress-...

https://github.com/humanmade/hashicorp-vault

You typically grab those values from environment variables if you deploy wordpress as a container.

Also ECS task definitions natively support Secrets Manager, with no intermediate retrieval necessary

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/...

Reply on news.ycombinator.com