suminb/finance

Securely store DB_URL with Terraform and AWS

suminb opened this issue · 1 comments

Option 1: Hard-code in a Terraform file

Oh, hell no. It ain't gonna happen.

Option 2: DynamoDB

We could dedicate one record in DynamoDB to store DB_URL, but is it worth to introduce additional complexity within our architecture just to accomplish this?

Option 3: S3

Pretty much the same idea as Option 2, but in S3.

Option 4: Embed it in build-time

Embed DB_URL when assembling a Lambda .zip package.

Option 5: Input variables

terraform apply -var db_url=$DB_URL

Option 5 seems like the most plausible solution at the moment...