CLI for managing secrets in AWS SSM Parameter Store, with audit history and export-import commands
- Stars2.6k
- Forks183
- Open Issues37
MIT
- Go
- Makefile
- Go Template

About Chamber
Chamber is a command-line tool for managing secrets. It stores secrets in AWS SSM Parameter Store by default, and can also use AWS Secrets Manager. The main use case is keeping application secrets organized and readable from the terminal.
It supports path-based secret storage, listing, reading, writing, deleting, finding by value, exporting, importing, and exec-style environment loading. A history command shows past values for a secret and helps trace who changed it. Experimental S3 and S3 KMS backends are also available, along with a null backend that forwards existing environment variables.
Chamber is MIT licensed and installs as a single Go binary, with secrets living in your AWS account rather than a built-in database. Because storage is delegated to AWS services, deployment is tied to whichever backend you configure. It also ships optional usage analytics that stay off by default in public release builds.
Key features
- Store secrets in AWS SSM Parameter Store
- Use AWS Secrets Manager as an alternate backend
- List, read, write, delete, find, export, and import secrets
- History view for past values and change tracing
- Exec command loads secrets into environment variables
Details
- First released
- 2017
- Storage
- AWS SSM Parameter Store
- Backend
- AWS Secrets Manager · S3 · S3 KMS
- Analytics
- Disabled by default
- License
- MIT
- Deployment
- cloud
