{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"CredStash stores and retrieves secrets using AWS KMS for encryption and DynamoDB for storage, providing a simple credential management system for applications and infrastructure.","skillfed_tags":["aws-integration","secret-management","abandoned"],"use_cases":["Store database passwords and API keys in DynamoDB, encrypted by KMS, for retrieval during application bootstrap.","Rotate credentials by creating new versions of a secret and updating client code to fetch the latest version.","Audit credential access by associating encryption context with secrets and reviewing KMS CloudTrail logs.","Distribute secrets to multiple servers or containers by having them fetch from the same DynamoDB table using shared KMS permissions.","Manage TLS/SSL certificates and private keys with fine-grained access control via KMS Key Policy conditions."],"what_it_does":"CredStash is a credential management tool that integrates AWS KMS (for key encryption) and DynamoDB (for credential storage) to securely store, version, and distribute secrets across your infrastructure. It wraps each secret with a unique data encryption key encrypted by your KMS master key, then stores both the encrypted secret and wrapped key in DynamoDB. When you retrieve a secret, CredStash fetches the encrypted credential and key from DynamoDB, decrypts the key via KMS, and uses it to decrypt the secret.\n\nThe tool is designed for teams that want a lightweight, AWS-native alternative to dedicated secret-management systems. It supports versioning (so you can rotate credentials by creating new versions), encryption context (for audit trails and fine-grained access control via KMS policies), and simple CLI operations (put, get, list). However, the project has been abandoned since 2022 with no active maintenance, so it may not be compatible with current AWS SDK versions or modern Python environments without manual updates.","worth_installing":"No\u2014the project is abandoned (last release April 2020, last commit February 2022) and likely incompatible with current AWS SDK and Python versions. For new projects, use AWS Secrets Manager or Parameter Store instead. Only consider it for legacy systems already running CredStash that cannot be migrated."},"id":"credstash","links":{"html":"https://skillfed.io/packages/credstash","md":"https://skillfed.io/packages/credstash.md","pypi":"https://pypi.org/project/credstash/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2020-04-11","license_spdx":null,"license_treatment":"permissive","name":"credstash","python_support":"unspecified","summary":"A utility for managing secrets in the cloud using AWS KMS and DynamoDB"},"popularity":{"monthly_downloads":490159,"position":6371,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.17.1"}