# SOPS support **URL:** \ **Category:** Ansible Developer\ **Tags:** aws\ **Created:** [May 2, 2016, 5:37pm UTC](https://forum.ansible.com/t/sops-support/21332 "2016-05-02T17:37:02Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![seth](https://avatars.discourse-cdn.com/v4/letter/s/f14d63/32.png) [@seth](https://forum.ansible.com/u/seth)\ **Post date:** [May 2, 2016, 5:37pm UTC](https://forum.ansible.com/t/sops-support/21332/1 "2016-05-02T17:37:02Z")
I’m interested in contributing SOPS support to Ansible. SOPS [https://github.com/mozilla/sops](https://github.com/mozilla/sops) is a tool for encrypting only the values in YAML (and JSON) files using AWS KMS or GPG keys. Encrypting only the values makes both diff’s and the encrypted files human readable for many questions without leaking sensitive information in most applications (it’s not news that there’s a datadog\_api key in a playbook that installs datadog, for example.) My company is using this feature internally and is very pleased with the result. Compatibility: SOPS support changes the meaning of `sops` keys at the top level in Ansible YAML files. The basics of adding it to core are trivial: [https://github.com/kindlyops/ansible/commit/7ec21724bffb43fe32d8231ab6a14c6e9b1fdc66](https://github.com/kindlyops/ansible/commit/7ec21724bffb43fe32d8231ab6a14c6e9b1fdc66) . I believe that still needs the following: - Conditional importing of sops. If you don’t use the feature, you shouldn’t have to deal with building the dependencies. - Tests, of course! I have engineering resources available to do both of those, but before I do, I’m interested in reactions both to the feature and the approach. Cheers, Seth W. Klein Operations Engineer, KindlyOps ---
**Author:** ![Bill\_Wanjohi](https://avatars.discourse-cdn.com/v4/letter/b/ccd318/32.png) [@Bill\_Wanjohi](https://forum.ansible.com/u/Bill_Wanjohi)\ **Post date:** [April 11, 2017, 3:17pm UTC](https://forum.ansible.com/t/sops-support/21332/2 "2017-04-11T15:17:23Z")
I like that Ansible has a built-in facility for secrets, but SOPS would be a big step up in usability and security, so I’d be very intrigued.