5 ms·
Cool. I'm curious: what was your motivation for doing this rather than using Chef's encrypted data bags? Is it because it's tightly integrated with IAM? If tha
by systemizer 12y ago
Cool. I'm curious: what was your motivation for doing this rather than using Chef's encrypted data bags?
Is it because it's tightly integrated with IAM? If that's the case, does that mean you guys use a cookbook that tightly couples system users with IAM roles?
- mahmoudimus 12y agoWe're strong believers that data bags are an anti-pattern. One of our engineers, https://github.com/coderanger https://github.com/coderanger, wrote something up: https://coderanger.net/2014/02/data-bags/ https://coderanger.net/2014/02/data-bags/ He was employed previously at Opscode, now Chef Inc.