Skip to content
Secrets

Passwords, API keys and .env files, encrypted and versioned.

EZGH Secrets stores sensitive values, such as database passwords, API keys, certificates and the contents of a .env file, as named fields in immutable versions.

Terminal
$ ezgh secrets create prod/app --from-env-file .env$ ezgh secrets put prod/app --set API_KEY=new --remove OLD_KEY# Load the latest version into your shell$ eval "$(ezgh secrets read prod/app)"

What you get

Immutable versions

Every write is a new version. Read latest or any version, one field or all of them.

Import a .env file

Create a secret from a .env or JSON file, and read it back as env, JSON or raw bytes.

Grants

Let EZGH products use a secret without ever handing its value to the person who set it up.

Every read recorded

Values are encrypted at rest, and each read of a value is recorded in Trails.

Stored fields$0.01per field-month
Reads$0.10per million
Writes$0.10per million

For example, 200 fields, 3 million reads and 10,000 writes cost $2.30 a month.

At a glance

Per value
Up to 8 KiB
Per version
Up to 1,000 fields
Reads
5,000 a second per organization
API
secrets.ezghcloud.com

Built on the platform

Governed like every other product, from the first call.