DEV Community

Discussion on: Use your Yubikey to its Fullest

Collapse
 
oneofthejohns profile image
Joann Babak

@shostarsson old topic, but.. do you have any experience of storing AWS secret access key in yubikey? maybe you have any suggestions? ( to store it as "static" password it would not do, because this AWS secret key exceeds 38 characters , and no, as far as i know we cannot force AWS to shorten it ;{ )

Collapse
 
shostarsson profile image
Rémi Lavedrine

Hello,
Indeed, you can use a Yubikey to store a password or more largely, a secret.
Nevertheless, you should use the AWS Keyvault if you want to store a secret on AWS.
Moreover, it is much more secure as you can use a secret and never know what it is, because only AWS knows it. And it can be rotated automatically by AWS.

Nevertheless, the Yubikey can be considered as a Secure Element. So you can store your secret in one of its Secure Element (Yubikey as 2 Secure Elements available).

Cheers