CH-3.1.4 – Docker Secrets | AWS EKS Security Masterclass with OWASP EKS Goat скачать в хорошем качестве

CH-3.1.4 – Docker Secrets | AWS EKS Security Masterclass with OWASP EKS Goat

Docker Secrets help you protect sensitive data like passwords, API keys, and certificates without hardcoding them into Docker images or containers. Storing secrets directly in Dockerfiles or environment variables is a common but dangerous mistake that can easily lead to credential leakage. In this video you will: Understand why hardcoding secrets in Docker containers is a security risk Learn what Docker Secrets are and how they work Understand the role of Docker Swarm as an orchestrator for secret management Initialize Docker Swarm on a local Docker environment Create a secret from a file using `docker secret create` Deploy a Docker service that securely consumes secrets Access secrets inside a running container via `/run/secrets` Verify that secrets are injected at runtime, not baked into images Clean up Docker services, secrets, and files safely This hands-on lab is part of the **OWASP EKS Goat project**, where we focus on real-world container and cloud security misconfigurations and their secure alternatives. The goal is to build strong fundamentals that directly translate to Kubernetes and production-grade environments. This chapter is part of the AWS EKS Security Masterclass on PeachyCloudSecurity YouTube by TheShuklaDuo (Anjali & Divyanshu). Docs & Labs 📓 OWASP EKS Goat Docs: https://eksgoat.peachycloudsecurity.com 📘 OWASP EKS Goat Repo: https://github.com/OWASP/www-project-... 🌐 Get all links and labs: https://peachycloudsecurity.com 🌊 Linkedin: https://linktr.ee/peachycloudsecurity 🎥 YouTube:    / @peachycloudsecurity   📸 Instagram: instagram.com/peachycloudsecurity 👍 Topmate: topmate.io/peachycloudsecurity #DockerSecurity #DockerSecrets #ContainerSecurity #DevSecOps #CloudSecurity #OWASPEKSGoat #EKSMasterclass #KubernetesSecurity #DockerSwarm #PeachyCloudSecurity #TheShuklaDuo #CloudNativeDevelopment