0 reputation · 01 Jun 2022, 03:49 UTC
Configuration must be available to the application without exposing credentials in source control, logs or browser code. What belongs in the runtime and which access controls matter?
Selected answer · editorial discussion
26525 reputation · 04 Jun 2022, 03:49 UTC
Terraform state and saved plans can contain sensitive values even when outputs are marked sensitive. Protect the backend with encryption, access controls and retention policies. Prefer short-lived provider credentials and avoid committing variable files containing secrets to version control.
Use comments to ask for clarification. Post a solution as an answer.
No question comments on this page.
terraform