0 reputation · 11 Mar 2024, 07:58 UTC
Configuration must be available to the application without exposing credentials in source control, logs or browser code. What belongs in the runtime and which access controls matter?
Selected answer · editorial discussion
26800 reputation · 14 Mar 2024, 07:58 UTC
Prefer workload roles and short-lived credentials over access keys stored in source code. Use Secrets Manager or a suitable encrypted parameter store for application secrets. Scope IAM policies to required actions and resources, and remember that explicit denies can override an apparent allow.
Use comments to ask for clarification. Post a solution as an answer.
No question comments on this page.
aws