AWS Secrets Manager vs Teller
AWS Secrets Manager
aws.amazon.comTeller
github.comSide by side
| Figure | AWS Secrets Manager | Teller |
|---|---|---|
| Price from | $0.40/mo | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | — |
| Plans published | 2 | 1 |
| Spec score · Secrets Management Tools | 8.5 (#3) | 7.3 (#27) |
| Integrations | Listed AWS integrations include Amazon RDS, Amazon Redshift, Amazon DocumentDB, Amazon MSK, Amazon SageMaker, AWS CodeBuild, and AWS Transfer Family. | The README names HashiCorp Vault, AWS Secrets Manager, Google Secret Manager, HashiCorp Consul, AWS SSM, and dotenv providers. |
| Purpose | AWS Secrets Manager manages access to applications, services, IT resources, database credentials, API keys, and other secrets throughout their lifecycle. | Teller is an open-source secret manager for developers working with secrets while developing, testing, and building apps. |
Plans
In their own words
AWS Secrets Manager
AWS Secrets Manager has no write-up on Specifiction yet; its figures are above.
Teller
Teller is a free, Apache-2.0 open-source secret manager for developers working with secrets during development, testing, and app builds. It connects to vaults, key stores, and cloud services for personal environments or team workflows. Named integrations include HashiCorp Vault, AWS Secrets Manager, Google Secret Manager, HashiCorp Consul, AWS SSM, dotenv, etcd, and an in-memory store. The `teller run` command can start a subprocess with fetched variables, while `teller env` can provide a Docker `--env-file`. Teller can scan code for secrets and return exit code 1 in CI when run with `--error-if-found`. It can also redact secrets from process output, logs, live log tails, and files. Provider mappings can specify a root path, mapping ID, and key renames; configuration templates can use environment variables. The project offers release binaries and source installation with `cargo install --path .`. Write operations are available only through providers that support them.