“iViewed your API Keys”: Aussie state media publishes env vars

1

ABC iview

#Video & Movies #Watch Movies Online #Entertainment 35 social mentions

2

EnvKey

Shameless plug, but we built EnvKey[1] for exactly this purpose. Instead of providing secrets directly to a server, you generate an ENVKEY token which is used to fetch and decrypt the app’s secrets and config and supply them as environment variables to the process. The ENVKEY still needs to be protected, but you can limit which IPs can access it <i>and</i> if access is cut off, the process will be killed and secrets cleared immediately, so you do get some additional protection. All access attempts are also logged. 1 - https://envkey.com.

#Configuration Management #Secrets Management #Password Management 8 social mentions