Stop passing around .env files: Python secrets from AWS SSM
I thought moving secrets to AWS SSM Parameter Store had solved our configuration problem. It solved...
Aug 4, 2026
![Night Owl](data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"><defs><linearGradient id="gNight" x1="0%" y1="0%" x2="100%" y2="100%"><stop offset="0%" stop-color="%23312e81" /><stop offset="100%" stop-color="%23818cf8" /></linearGradient><filter id="fNight"><feDropShadow dx="0" dy="2" stdDeviation="3" flood-opacity="0.3"/></filter></defs><circle cx="50" cy="50" r="45" fill="url(%23gNight)" filter="url(%23fNight)"/><circle cx="50" cy="50" r="38" fill="none" stroke="rgba(255,255,255,0.2)" stroke-width="2"/><circle cx="65" cy="35" r="15" fill="%23fef08a" opacity="0.9"/><path d="M30 70 C 30 40, 70 40, 70 70 Z" fill="%23ffffff"/><circle cx="42" cy="55" r="5" fill="%23312e81"/><circle cx="58" cy="55" r="5" fill="%23312e81"/><polygon points="48,62 52,62 50,68" fill="%23fbbf24"/></svg>)
![Weekend Warrior](data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"><defs><linearGradient id="gWknd" x1="0%" y1="0%" x2="100%" y2="100%"><stop offset="0%" stop-color="%231d4ed8" /><stop offset="100%" stop-color="%2360a5fa" /></linearGradient><filter id="fWknd"><feDropShadow dx="0" dy="2" stdDeviation="3" flood-opacity="0.3"/></filter></defs><circle cx="50" cy="50" r="45" fill="url(%23gWknd)" filter="url(%23fWknd)"/><circle cx="50" cy="50" r="38" fill="none" stroke="rgba(255,255,255,0.4)" stroke-width="2"/><path d="M30 30 C 50 20, 50 20, 70 30 L 70 50 C 70 70, 50 80, 50 80 C 50 80, 30 70, 30 50 Z" fill="%23ffffff" opacity="0.9" filter="url(%23fWknd)"/><rect x="40" y="45" width="20" height="20" rx="2" fill="%231d4ed8"/><rect x="40" y="45" width="20" height="5" fill="%23bfdbfe"/><line x1="45" y1="42" x2="45" y2="48" stroke="%231e3a8a" stroke-width="2"/><line x1="55" y1="42" x2="55" y2="48" stroke="%231e3a8a" stroke-width="2"/></svg>)
8 min
Subscribe to Marçal Albert Castellví's Newsletter
Get new articles and engineering posts delivered to your inbox.
LocalStack now requires an auth token: keeping it out of Git with Docker Compose
How I run LocalStack without committing LOCALSTACK_AUTH_TOKEN Updated October 2026: This...
Jun 9, 2026
5 min
One year of Envilder: from a CLI script to SDKs, push mode, and a website
This is a follow-up to my first post about Envilder, where I introduced it as a simple CLI to...
May 7, 2026
6 min
LocalStack now needs an auth token: getting it into Testcontainers without a .env file
Since March 2026, the LocalStack image won't start without LOCALSTACK_AUTH_TOKEN. Here's how I feed...
Jul 5, 2025
6 min
From chaos to consistency: how we centralized secrets with AWS SSM and a simple CLI
At M47, security is one of our concerns across all our AI and cloud-native projects. That’s why we...
Mar 10, 2025
2 min
You've reached the end