4 ms·
I accidentally pushed an AWS key to a public repo, and by the next day, had like $50k in charges from crypto miners. AWS reversed the charges, with the only con
by bdcravens 2y ago
I accidentally pushed an AWS key to a public repo, and by the next day, had like $50k in charges from crypto miners. AWS reversed the charges, with the only condition that we enable some basic security guardrails that I should have had in place to begin with.
- normie3000 2y agoWhat were the guardrails?
- duckmysick 2y agoAutomated secrets scanning is one of them. You can do it as a pre-commit hook. GitHub and Gitlab can scan it too. https://docs.github.com/en/code-security/secret-scanning/introduction/about-secret-scanning https://docs.github.com/en/code-security/secret-scanning/int... https://docs.gitlab.com/ee/user/application_security/secret_detection/ https://docs.gitlab.com/ee/user/application_security/secret_...