# storing ansible vault key and encrypted files in s3

**URL:** <https://forum.ansible.com/t/storing-ansible-vault-key-and-encrypted-files-in-s3/24092>\
**Category:** Ansible Project\
**Tags:** aws\
**Created:** [March 28, 2017, 10:24pm UTC](https://forum.ansible.com/t/storing-ansible-vault-key-and-encrypted-files-in-s3/24092 "2017-03-28T22:24:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Manoj\_Kumar2](https://avatars.discourse-cdn.com/v4/letter/m/ce73a5/32.png) [@Manoj\_Kumar2](https://forum.ansible.com/u/Manoj_Kumar2)\
**Post date:** [March 28, 2017, 10:24pm UTC](https://forum.ansible.com/t/storing-ansible-vault-key-and-encrypted-files-in-s3/24092/1 "2017-03-28T22:24:40Z")

</div>

wondering if we can pass s3 uri as a path for file

ansible-vault view  
group\_vars/encryptedfile.yml--vault-password-file=vault.pem

I dont want to store these in my git repo and wondering if these can be  
accessed from s3 bucket which has IAM policies setup

something similar

ansible-vault view s3://  
aws.amazon.com/mybucket/encryptedfile.yml--vault-password-file=  
\<[https://www.linkedin.com/redir/redirect?url=aws.amazon.com%2Fmybucket%2Fencryptedfile.yml--vault-password-file%3D&urlhash=KyaA&\_t=tracking\_anet&gt](https://www.linkedin.com/redir/redirect?url=aws%2Eamazon%2Ecom%2Fmybucket%2Fencryptedfile%2Eyml--vault-password-file%3D&urlhash=KyaA&_t=tracking_anet&gt);  
s3://aws.amazon.com/differentbucket/vault.pem  
\<[https://www.linkedin.com/redir/redirect?url=aws.amazon.com%2Fdifferentbucket%2Fvault.pem&urlhash=anB-&\_t=tracking\_anet&gt](https://www.linkedin.com/redir/redirect?url=aws%2Eamazon%2Ecom%2Fdifferentbucket%2Fvault%2Epem&urlhash=anB-&_t=tracking_anet&gt);

may be i should ask if/how are u managing your pem (vault, encrypted files)  
especially . deploying your infrastructure using terraform and ansible  
combination

---

<div class="post-metadata">

**Author:** ![dch](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/dch/32/7132_2.png) [@dch](https://forum.ansible.com/u/dch)\
**Post date:** [March 30, 2017, 5:56pm UTC](https://forum.ansible.com/t/storing-ansible-vault-key-and-encrypted-files-in-s3/24092/2 "2017-03-30T17:56:03Z")

</div>

Look into vaultproject.io and [https://github.com/jhaals/ansible-vault/](https://github.com/jhaals/ansible-vault/)  
plugin. You should be able to store vault backend data in s3 and use IAM  
to restrict access for the vault server.

A+  
Dave