biscuit-py 0.1.1

biscuit-py decrypts secrets managed by Biscuit.

Biscuit provides tooling for securely managing secrets used in AWS deployments. This project implements example Python code for reading secrets encrypted with the Biscuit CLI.

Installing

Install with:

$ pip install biscuit-py

Example

from biscuit import biscuit

secrets = biscuit()
with open("secrets.yml", "r") as fp:
    secrets.update(yaml.safe_load(fp))
launch_codes = secrets.get("launch_codes")

You can also control the creation/pooling of the AWS KMS client by passing a factory method to biscuit():

secrets = biscuit(lambda region: boto3.client('kms', region_name=region))