Average Ratings 0 Ratings
Average Ratings 1 Rating
Description
Confidant is an open-source service designed for secret management, enabling secure and user-friendly storage and retrieval of sensitive information, developed by the team at Lyft. It addresses the challenge of authentication by leveraging AWS KMS and IAM, which enables IAM roles to create secure tokens that Confidant can validate. Additionally, Confidant oversees KMS grants for your IAM roles, facilitating the generation of tokens for service-to-service authentication and enabling encrypted communication between services. Secrets are stored in an append-only format within DynamoDB, with each revision of a secret linked to a distinct KMS data key, utilizing Fernet symmetric authenticated encryption for security. Furthermore, Confidant features a web interface built with AngularJS, allowing users to efficiently manage their secrets, associate them with services, and track the history of modifications. This comprehensive tool not only enhances security but also simplifies the management of sensitive data across various applications.
Description
Cryptography encompasses both high-level methods and low-level interfaces for standard cryptographic techniques, including symmetric ciphers, message digests, and key derivation functions. By utilizing the high-level symmetric encryption method provided by cryptography, users can easily perform encryption tasks. The field of cryptography is generally classified into two distinct levels: one featuring secure recipes that are straightforward to use with minimal configuration requirements, making them accessible for developers with little decision-making involved. Conversely, the other level comprises low-level cryptographic primitives that pose significant risks if misapplied, necessitating a thorough understanding of advanced cryptographic principles and careful decision-making. Due to these inherent risks, this lower tier is often labeled as the "hazardous materials" or "hazmat" layer, with relevant resources located in the cryptography.hazmat package, where documentation always includes a warning at the beginning to highlight the associated dangers. Additionally, mastering these low-level interfaces can lead to powerful custom implementations, but they demand a commitment to learning and adhering to best practices in cryptographic security.
API Access
Has API
Yes
API Access
Has API
Yes
Integrations
AWS Amplify
Yes
Amazon DynamoDB
Yes
Amazon Web Services (AWS)
Yes
IAM Cloud
Yes
Integrations
AWS Amplify
No
Amazon DynamoDB
No
Amazon Web Services (AWS)
No
IAM Cloud
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
Free
Free Trial
No
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Confidant
Founded
2014
Website
lyft.github.io/confidant/
Vendor Details
Company Name
cryptography
Founded
2013
Website
cryptography.io/en/latest/
Product Features
Privileged Access Management
Application Access Control
No
Behavioral Analytics
No
Credential Management
No
Endpoint Management
No
For MSPs
No
Granular Access Controls
No
Least Privilege
No
Multifactor Authentication
No
Password Management
No
Policy Management
No
Remote Access Management
No
Threat Intelligence
No
User Activity Monitoring
No