HNHacker News
TopNewBestAskShowJobs

TaronAvagyan

8 karma · joined January 2, 2024

submissionscomments
TaronAvagyan··on Show HN: A self-hosted, AWS-based secrets manager
> ask 100 random people

I don't think it should be left to the opinion of 100 "random" people.

I'll quote Wikipedia[0] again: "Self-hosting is the practice of running and maintaining a website or service using a private web server..."

Embrasure is built on a Virtual Private Cloud instance.

https://en.wikipedia.org/wiki/Self-hosting_(web_services)

TaronAvagyan··on Show HN: A self-hosted, AWS-based secrets manager
Postgresql is a great example.
TaronAvagyan··on Show HN: A self-hosted, AWS-based secrets manager
True, but it doesn't have a program wrapper and isn't part of the AWS Free tier.

For a lot of teams, it's a better choice than Embrasure, but Embrasure serves its use case well and all of its components can be deployed with AWS's free plan.

TaronAvagyan··on Show HN: A self-hosted, AWS-based secrets manager
Based on a strict definition, I agree that Embrasure may not be considered self-hosted, but I don't think that's the "prevailing expectation."

For example, look at Infisical's documentation[0], and you'll see they offer self-hosting solutions on AWS, GCP, Azure, and more.

[0]https://infisical.com/docs/self-hosting/overview

TaronAvagyan··on Show HN: A self-hosted, AWS-based secrets manager
That's a fair point. Thanks for the feedback!
TaronAvagyan··on Show HN: A self-hosted, AWS-based secrets manager
I would disagree. Sure, you don't own the hardware, but you have total control over Embrasure's functionality within your self-contained instance.

Wikipedia: "Self-hosting is the practice of running and maintaining a website or service using a private web server, instead of using a service outside of someone's own control."

TaronAvagyan··on Show HN: A self-hosted, AWS-based secrets manager
I agree this is generally a good idea, but sometimes you can't avoid using secrets. Right?
TaronAvagyan··on Show HN: A self-hosted, AWS-based secrets manager
SSM is a great alternative, but it's a managed solution. Embrasure is self-hosted.
TaronAvagyan··on Show HN: A self-hosted, AWS-based secrets manager
> expected "self-hosted" to mean I can host anywhere

You're referring to a cloud-agnostic solution.

Embrasure is self-hosted since each instance is deployed within an organization's infrastructure, but as you mentioned, it's AWS-dependent.

TaronAvagyan··on Show HN: A self-hosted, AWS-based secrets manager
Thanks! We used Adobe and svgrepo.com for vectors.