# Securing the aws credentials in logstash kinesis pluging

**URL:** <https://discuss.elastic.co/t/securing-the-aws-credentials-in-logstash-kinesis-pluging/189445>\
**Category:** Logstash\
**Created:** [July 9, 2019, 1:35am UTC](https://discuss.elastic.co/t/securing-the-aws-credentials-in-logstash-kinesis-pluging/189445 "2019-07-09T01:35:18Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![asrinivasan](https://avatars.discourse-cdn.com/v4/letter/a/b4bc9f/32.png) [@asrinivasan](https://discuss.elastic.co/u/asrinivasan)\
**Post date:** [July 9, 2019, 1:35am UTC](https://discuss.elastic.co/t/securing-the-aws-credentials-in-logstash-kinesis-pluging/189445/1 "2019-07-09T01:35:18Z")

</div>

Currently my configuration is as below

the aws credentials is in the /usr/share/logstash/.aws

The logstash is running on vm in google cloud and accessing the aws stream .  
I want to secure the aws credentails and do not want to put in a file in the system.  
Would like to store it in the logstash keystore and access it in the conf file in conf.d directory.  
I dont see a way to specify the aws keys and values in the conf file in the input section .

Plz advise

input {  
kinesis {  
kinesis\_stream\_name =\> "logstash"  
application\_name =\> "logstash"  
profile =\> "my\_profile"  
initial\_position\_in\_stream =\> "TRIM\_HORIZON"  
region =\> "xxxxx"  
codec =\> cloudwatch\_logs  
type =\> "cloudwatch"  
}  
}

thx

Arun

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 6, 2019, 1:35am UTC](https://discuss.elastic.co/t/securing-the-aws-credentials-in-logstash-kinesis-pluging/189445/2 "2019-08-06T01:35:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.