Self hosted secrets management server powered by Infisical for API keys, passwords, database credentials, environment variables, and application secrets. Runs inside your AWS account with automated first boot, unique per instance security secrets, trusted HTTPS, PostgreSQL, Redis, and simple operations helpers. This is a repackaged open source software product wherein additional charges apply for Code Creator automated first boot provisioning, unique per instance security secret generation, PostgreSQL and Redis integration, trusted HTTPS configuration, secure administrator onboarding, backup and operational tooling, and AWS Marketplace AMI engineering.
Private Secrets Management Server with Infisical by Code Creator
Give your team a centralized, private secrets management platform that runs entirely inside your own AWS account. Instead of scattering API keys, passwords, database credentials, access tokens, and environment variables across source code, shared documents, and developer machines, you manage everything from a single, easy-to-use web dashboard powered by Infisical.
What You Get
This product deploys a fully configured secrets management server on a single EC2 instance. The stack includes:
Infisical - Modern secrets management platform with a web dashboard for organizing and retrieving secrets across projects and environments
PostgreSQL - Dedicated database for persistent secrets storage, isolated from public network access
Redis - In-memory data store for application performance, isolated from public network access
Nginx - Reverse proxy with automated trusted HTTPS provisioning
Docker and Docker Compose - Container orchestration for all application components
Backup tools - Built-in utilities for backing up and restoring your secrets data
Health monitoring and restart tools - Operational tooling to keep your server running reliably
Automatic public IP refresh - Detects and applies your EC2 public IP address automatically
Automated First Boot - Launch and Start Managing Secrets
The server is designed to be operational shortly after launch. The automated first boot process handles the heavy lifting:
Generates unique encryption and authentication secrets for your specific instance
Initializes and configures PostgreSQL and Redis with network isolation
Configures the Infisical application and all supporting services
Detects your EC2 public IP address automatically
Provisions trusted HTTPS access so your dashboard connection is encrypted
Protects the web interface until you authorize your browser and create the first administrator account
No manual configuration of databases, encryption keys, or TLS certificates is required.
Security Architecture
This product is built for teams that need their credentials to stay within infrastructure they control:
Per-instance encryption - Every new deployment generates its own unique encryption and authentication secrets, ensuring no two instances share key material
Database isolation - PostgreSQL and Redis remain isolated from public network access, accessible only by the application stack
Trusted HTTPS - Automated certificate provisioning ensures encrypted browser and API connections to your dashboard
Protected onboarding - The web interface is secured until the first administrator account is created, preventing unauthorized access during setup
Security hardening - The AMI includes hardening measures applied to the server configuration
Use Case: Centralizing CI/CD Pipeline Secrets
Development teams running continuous integration and deployment pipelines often store secrets in multiple locations - CI/CD platform secret stores, environment files checked into repositories, and configuration scattered across build scripts. With this product, a DevOps team can centralize all pipeline credentials in one Infisical server running in their own VPC. Applications, build systems, and automation scripts retrieve secrets through the Infisical API or CLI, while the underlying data never leaves the team's AWS account. This approach is especially relevant for teams that need to keep credentials out of third-party SaaS platforms for policy or data residency reasons.
Who This Product Is For
Developers who want to stop hardcoding secrets in application code and environment files
DevOps teams looking for a centralized secrets platform they fully control
Startups and software companies that need secrets management without depending on an external hosted service
Organizations managing API keys, database passwords, service tokens, and credentials used by internal applications and automation
Common Uses
Managing API keys, database passwords, application credentials, environment variables, CI/CD secrets, service tokens, development secrets, and credentials used by internal applications and automation workflows.
Get Started
Launch the AMI from AWS Marketplace, wait for the automated first boot to complete, then open the HTTPS dashboard in your browser to create your administrator account and begin storing secrets. Code Creator charges apply for the automated first boot deployment, unique encryption and authentication secret generation, PostgreSQL and Redis integration, trusted HTTPS provisioning, protected administrator onboarding, backup and health tooling, public IP refresh automation, security hardening, and AWS Marketplace ready AMI engineering.
Highlights
Every Instance Gets Unique Encryption and Authentication Secrets
Unlike reusing shared keys, each new EC2 launch automatically generates its own encryption and authentication secrets during first boot. This means no two instances share cryptographic material, reducing blast radius if a single server is compromised.
Automated First Boot Eliminates Manual Infrastructure Configuration
Launching this AMI triggers an automated sequence that initializes PostgreSQL and Redis, configures the Infisical application, detects your EC2 public IP, and provisions trusted HTTPS - all without manual intervention. There are no external dependencies to wire up and no multi-step install guides to follow.
Centralized Secrets for Developers, DevOps, and CI/CD Pipelines
Manage API keys, passwords, database credentials, tokens, and environment variables from a single Infisical web dashboard running privately in your AWS account. Application teams can integrate secrets into CI/CD pipelines and automated deployments through the Infisical API and CLI. The self-hosted model keeps sensitive credentials off third-party platforms while providing the same developer-friendly interface as hosted alternatives.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Private Secrets Management Server with Infisical by Code Creator
This listing bills hourly based on the EC2 instance size you run. You pay the software rate for each hour the server is active, plus separate AWS infrastructure charges. The options fall into three instance families. The t3 sizes (medium through 2xlarge) suit lighter or variable workloads. The m6i and m7i families scale from large up to very large sizes (such as 8xlarge, 16xlarge, and 32xlarge) for steady, higher-capacity needs. Larger instance sizes carry more compute, memory, and a higher hourly rate. Choose the size that matches your workload; you can change instances as needs shift.
Top-of-mind questions for buyers
What exactly does the hourly rate pay for on this listing?
The hourly rate covers the pre-built secrets management server software running on your chosen EC2 instance. You pay the software rate for each hour that instance runs. Separate AWS infrastructure charges for compute, storage, and data transfer apply on top of the software rate.
Am I charged the software rate when the instance is stopped?
The software rate meters running time only. A fully stopped instance stops accruing the hourly software charge. Underlying AWS storage fees for the attached volume may still apply while the instance is stopped, since that data is retained separately from the software licence.
Can I switch between instance sizes or families after launching?
Yes. You pick one instance size at launch and pay its hourly rate while it runs. You can stop that instance and relaunch on a different size or family as your workload changes. Billing follows whichever instance is active, so each size carries its own hourly rate.
www.codecreator.com
Helpful?
Vendor refund policy
You may cancel the AWS Marketplace subscription at any time. No contracts. Software charges already incurred are not refundable.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Complete clean rebuild on Ubuntu 26.04 LTS with Infisical v0.162.19 PostgreSQL 16 Redis 7 Docker and Nginx. Adds secure automated first boot unique per instance secrets trusted HTTPS on the public IPv4 protected first administrator onboarding backup and operations helpers public IP refresh automation SSH hardening and clean AWS Marketplace AMI preparation.
For questions, troubleshooting, or assistance with your Private Secrets Management Server, contact Code Creator by email at info@codecreator.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Infisical is the leading platform for developers to securely manage application configuration and secrets across their team and infrastructure. Used by Fortune 500 enterprises, international governments, and fastest-growing startups. With Infisical, you can save time for your engineering teams and enhance organization-wide security posture.
Deploy a self-hosted Supabase backend on AWS with automated setup, private admin access, health monitoring, and built-in backup and recovery - no manual configuration required.
Launch a private Keycloak identity and access management server on AWS with automated first boot, generated administrator credentials, HTTPS access, PostgreSQL, and built in backup and restore helpers. This is a repackaged open source software product wherein additional charges apply for Code Creator automated first boot provisioning, unique administrator and database credential generation, PostgreSQL and Nginx integration, HTTPS configuration, backup and restore tooling, and AWS Marketplace AMI engineering.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.