Production Secret Management at Airbnb

Our philosophy and approach to production secret management

Kaiyi Li
Kaiyi Li
Sep 19, 2018 · 6 min read
Keys are handed off during a check-in in Shanghai

Design Goals

Segmentation and Access-Control

Encrypted at Rest and Decrypted on Use

Secrets are encrypted at rest as databag files

Application Support and Integration

Secret access in production

Secret Rotation on a Continual Basis

Managed secret rotation

Putting it All Together

Making secrets available to production systems

Concluding Thoughts



Airbnb Engineering & Data Science

Creative engineers and data scientists building a world where you can belong anywhere. http://airbnb.io

Kaiyi Li

Written by

Kaiyi Li

Software Engineer at Airbnb

Airbnb Engineering & Data Science

Creative engineers and data scientists building a world where you can belong anywhere. http://airbnb.io