News for hackers. Stuff that matters.

A comment on I discovered thousands of open databases on AWS. Parent comment

Re:I discovered thousands of open databases on AWS by nouveaux on Tuesday March 15, 2022 @10:10AM (#30685495)
"it doesn't take a genius to set up a password for a cloud service."

Where are you going to store the password?

I'm not saying it's rocket science but it does take consideration. Do you store it in a plain text file on the server? How do you deal with CI/CD? Do you run a separate service for one credential?

[ Parent | on HN ]
Re:I discovered thousands of open databases on AWS by ThrashBeard on Tuesday March 15, 2022 @10:18AM (#30685616)
Really simple solutions.

AWS itself has a Secrets Manager from which other authorized services can pull secrets. If it's an outside CI/CD platform then those usually also have a place to store credentials.

[ Parent | on HN ]
Re:I discovered thousands of open databases on AWS by nouveaux on Tuesday March 15, 2022 @07:09PM (#30693156)
I agree that this would be a good solution. I'm merely bringing up that it takes consideration. Also someone will need to learn the Secrets Manager and also learn credentials management for CI/CD. It's probably at least a day of work if you're not familiar with it.

Don't get me wrong. I don't think anyone should skip this step. You need auth for your datastores.

[ Parent | on HN ]