2 ms·
how do you deal with "access to the proxy"? because one can access maliciously without accessing to the token/secret.
by tuananh 6mo ago
how do you deal with "access to the proxy"? because one can access maliciously without accessing to the token/secret.
- dangtony98 6mo agoAgent Vault should remain in close proximity to the sandboxed agent and not be exposed to the public internet; your standard network security controls apply. The proxy itself currently implements a token-based auth scheme. Depending on your setup, you can have an orchestrator mint an ephemeral token to be passed to a sandboxed agent to authenticate with the proxy.
- tuananh 6mo agothis feels like vpn all over again. the location shouldn't grant any inherent trust.
- dangtony98 6mo ago[dead]