Re:How to burn the most money with a single click in Azure
by applecrazy on Monday March 30, 2020 @02:01AM
(#22725621)
My guess would be poorly configured .gitignore files. I recently had a project collaborator commit his .env file containing credentials to a MongoDB cluster because of this.
[ Parent
| on HN ]
Re:How to burn the most money with a single click in Azure
by scarface74 on Monday March 30, 2020 @04:28AM
(#22726195)
if you follow the guidelines that are repeatedly stressed, your code should never be reading or handling AWS credentials directly. That wouldn’t be an issue.
The access keys would be in your usr directory and all of the SDKs would know how to find them. When running on AWS, the SDKs get the credentials from the instance metadata.