Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Imagine you are building a public service where you need to store the customer's cloud credentials(like their aws secret and access keys) in your database to regularly use by your backend services in the background to do things.

What are some of the key risks involved and potential controls which can be implemented to protect unauthorized disclosure of the customers keys?

share|improve this question
Cloud Security Alliance may have some references for you, here is the first hit I got from them:… ;… – Eric G May 7 '14 at 14:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.