A problem that organizations often encounter is where to store and how to access sensitive data such as the credentials for connecting to a database.

With Flyway you can either pass the secrets into Flyway using environment variables or tell Flyway where to fetch the secret from, if it is stored in a secret store that Flyway supports integration with.

Local secrets

For reading secrets on a local development machine, Flyway supports reading from that machine's secret store. The store flyway will use depends on the operating system of the machine.

This is the default storage mechanism in Flyway Desktop.

See Local secret storage.

Secret store integration

EDITION: ENTERPRISE

Flyway comes with support for the following secrets management solutions that enable you to successfully access and share sensitive data:

• AWS Secrets Manager
• Dapr Secret Store
• Google Cloud Secret Manager
• Vault