Chamber logo

Chamber

CLI for managing secrets in AWS SSM Parameter Store, with audit history and export-import commands

Repository activity
  • Stars2.6k
  • Forks183
  • Open Issues37
License

MIT

Languages
  • Go
  • Makefile
  • Go Template
Get it:GitHub
Chamber screenshot

About Chamber

Chamber is a command-line tool for managing secrets. It stores secrets in AWS SSM Parameter Store by default, and can also use AWS Secrets Manager. The main use case is keeping application secrets organized and readable from the terminal.

It supports path-based secret storage, listing, reading, writing, deleting, finding by value, exporting, importing, and exec-style environment loading. A history command shows past values for a secret and helps trace who changed it. Experimental S3 and S3 KMS backends are also available, along with a null backend that forwards existing environment variables.

Chamber is MIT licensed and installs as a single Go binary, with secrets living in your AWS account rather than a built-in database. Because storage is delegated to AWS services, deployment is tied to whichever backend you configure. It also ships optional usage analytics that stay off by default in public release builds.

Key features

  • Store secrets in AWS SSM Parameter Store
  • Use AWS Secrets Manager as an alternate backend
  • List, read, write, delete, find, export, and import secrets
  • History view for past values and change tracing
  • Exec command loads secrets into environment variables

Details

First released
2017
Storage
AWS SSM Parameter Store
Backend
AWS Secrets Manager · S3 · S3 KMS
Analytics
Disabled by default
License
MIT
Deployment
cloud