2 ms·

There's a chicken and egg problem here. If you move your secrets to a secret management service, how do you provide the credentials to unlock to that? Whether i

by Macha 5y ago

There's a chicken and egg problem here. If you move your secrets to a secret management service, how do you provide the credentials to unlock to that? Whether it's on disk, in the environment or on an internal endpoint like IAM host roles there's ways for this to be exposed in the event of bugs or security vulnerabilities in your application

SomeCallMeTim 5y ago
> in the event of bugs or security vulnerabilities in your application The article talks about keys being published as part of the web page configuration. That's far worse than "they could hack a server and gain its credentials!"