Questions tagged [security]
For questions related to IT Security, Information Security or DevSecOps.
103
questions
7
votes
2
answers
12k
views
How to only allow API Gateway requests to reach our EC2 instances
We have multiple EC2 instances hosting our micro-services. The autoscaling group of servers has an ELB. All traffic is routed via the AWS API Gateway. The problem is that the ELB has its HTTPS port ...
- 8,963
15
votes
2
answers
6k
views
How to store credentials that are required by an application?
Everyone is saying that storing credentials in version control (git) is a bad thing. So there must be other ways to store credentials which are much better.
An application must receive credentials ...
- 8,963
63
votes
7
answers
27k
views
How can I manage secrets in .tf and .tfstate?
I would like to use the Terraform MySQL Provider to keep a list of mysql users and grants handy for creating new test environments. The .tf and .tfstate files both seem to want to store the MySQL ...
- 1,484