Questions tagged [security]

For questions related to IT Security, Information Security or DevSecOps.

Filter by
Sorted by
Tagged with
7 votes
2 answers

How to only allow API Gateway requests to reach our EC2 instances

We have multiple EC2 instances hosting our micro-services. The autoscaling group of servers has an ELB. All traffic is routed via the AWS API Gateway. The problem is that the ELB has its HTTPS port ...
Evgeny Zislis's user avatar
15 votes
2 answers

How to store credentials that are required by an application?

Everyone is saying that storing credentials in version control (git) is a bad thing. So there must be other ways to store credentials which are much better. An application must receive credentials ...
Evgeny Zislis's user avatar
63 votes
7 answers

How can I manage secrets in .tf and .tfstate?

I would like to use the Terraform MySQL Provider to keep a list of mysql users and grants handy for creating new test environments. The .tf and .tfstate files both seem to want to store the MySQL ...
Anthony Neace's user avatar

1 2