4 ms·
OB: There is never a reason to have access keys anywhere in your source code or a config file in your source control directory. All of the AWS SDKs will get yo
by scarface74 4y ago
OB: There is never a reason to have access keys anywhere in your source code or a config file in your source control directory.
All of the AWS SDKs will get your credentials from
- hardcoded credentials in your code -> don’t do this
- environment variables - you get this when running locally from your control tower interface that most companies access via SSO via AD/Okta etc
- your global configuration file.
When running on AWS, your credentials are retrieved via the attached IAM Role for Lambda, ECS, EC2, etc.
I have done one third party integration where I used Azure DevOps to integrate with AWS using the AWS tools for Azure DevOps. Even then you store your credentials in an Azure vault separate from your source code.