DevOps Tooling · CLI
A command-line tool that turns one cloud secret into a local .env file, so developers stop copying secret values by hand.
Overview
estoe (Secret to Env) reads one explicitly selected secret from AWS Secrets Manager, Azure Key Vault or Google Secret Manager, checks that it is a flat JSON object of strings, and writes it as a dotenv file.
It uses the developer's existing cloud login, can preview key names without values, and refuses unsafe destinations. It only reads: it never creates secrets, logs in, or discovers other secrets.
Setting up a local environment often means copying values from a cloud console into a .env file by hand. That is slow and error-prone, and it leaks secrets into clipboards, shell history, screenshots and, too often, Git.
Developers on macOS or Linux who keep application configuration in a cloud secret manager and need the same values locally.
Solution
Infrastructure & architecture
A locally installed CLI, so there is no hosted infrastructure. The engineering is in the release pipeline, repository controls and least-privilege cloud permissions.