Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Imagine you are building a public service where you need to store the customer's cloud credentials(like their aws secret and access keys) in your database to regularly use by your backend services in the background to do things.

What are some of the key risks involved and potential controls which can be implemented to protect unauthorized disclosure of the customers keys?

share|improve this question
    
Cloud Security Alliance may have some references for you, here is the first hit I got from them: blog.cloudsecurityalliance.org/2012/03/12/… ; downloads.cloudsecurityalliance.org/initiatives/secaas/… –  Eric G May 7 at 14:46

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.