README.md in heroku-config-0.2.0 vs README.md in heroku-config-0.3.0

- old
+ new

@@ -2,16 +2,22 @@ [![Gem Version](https://badge.fury.io/rb/heroku-config.png)](http://badge.fury.io/rb/heroku-config) Quickly rotate [AWS credential keys](https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html) and [heroku configs](https://devcenter.heroku.com/articles/config-vars). -Do you have long-term AWS credentials like `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` deployed to your Heroku applications? When was the last time they were rotated? +Do you have long-term AWS credentials like `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` deployed to your Heroku applications? When was the last time they were rotated? Rotating AWS keys is one of the simplest security measures to take. Usually though, we're too busy with developing features and rotating keys take a back seat. This tool automates the boring and manual process of rotating keys. Run this on your CodeBuild, jenkins server, a lambda function, or just manually when you have to. ## Usage +Switch to an AWS_PROFILE with the permissions to create and delete AWS keys, usually an admin. + + export AWS_PROFILE=yourprofile + +Run the `aws-rotate` command. + heroku-config aws-rotate APP ## Example with Output $ heroku-config aws-rotate protected-oasis-24054 @@ -25,12 +31,33 @@ AWS_ACCESS_KEY_ID: AKIAXZ6ODJLQQEXAMPLE AWS_SECRET_ACCESS_KEY: sp4gmsuif0XgYG2cPiZbkvl93kTGaeDDhEXAMPLE Old access key deleted: AKIAXZ6ODJLQSGEXAMPLE $ +## Rotate Multiple Apps + +You can use the `aws-rotate-all` command to rotate a list of heroku apps. + + heroku-config aws-rotate-all FILE + +The FILE should contain a list of apps separated by new lines. Example: + +~/heroku-apps.txt: + + radiant-fortress-40674 + protected-oasis-24054 + +Then the command would be: + + heroku-config aws-rotate-all ~/heroku-apps.txt + +For more help: + + heroku-config aws-rotate-all -h + ## Installation -Or install with RubyGems. +Install with: gem install heroku-config Prerequisite: