3 ms·
> On servers in a text file in ~/.aws/credentials (where a lot of tooling saves AWS credentials) well that sounds clever.
by merb 10y ago
> On servers in a text file in ~/.aws/credentials (where a lot of tooling saves AWS credentials)
well that sounds clever.
- alexsmolen 10y agoYeah, I think it’s tricky to figure out how to place it somewhere that attackers would look but AWS tooling wouldn’t, by default, since otherwise they may be used in legitimate operation.
- philsnow 10y agonon-[default] profile seems like it would work. I don't think aws-sdk/boto/etc will use non-default creds if you don't explicitly tell it to.