New answers tagged

3

It’s really difficult when someone says “is it secure?”. Because the answer will almost certainly be “from what?”. You need to benchmark your security risk appetite, and from there look at what threats and vulnerabilities exist. Work out what you’re willing to accept, then mitigate the rest through different controls. I know it’s not what you are looking ...


-3

This holds true for all of the code, configurations publicly available, whether it be in Tutorials, Guides, Github repos etc. Everything needs to be taken with a bit of salt, always verify what you are getting make sure you know how it works. Don't just go out there and copy-paste stuff without knowing what it is and it does. EC2 instance ID's is a tricky ...


1

First, standard disclaimer: Security is not an all or nothing proposition. Security procedures for an anonymous favorite-cat-voting website will not be as stringent as the security procedures for the nuclear football. You need to decide on a security level that property balances cost vs usability for your organization. That being said, I agree with ...


4

Bottom line, the answer is No. If your S3 bucket is public, and you make it a website, the bucket name will appear in certificate logs which are fully public. There are tools that sniff certificate logs just to find such S3 buckets. Also if you make it a website -- it'll appear in the links you're presumably sharing out. The way to secure an S3 bucket is ...


1

The best way to share the information is to change the process you're using. A password can be generated and shared to the user through a myriad of secure methods. The key is to have the user change their own password on the next login. Using this method the admin will not know the users password after they log in for the first time. The second part of ...


0

That depends on your infrastructure/development environment set up. You could do several things. If you have set up a system like Hashicorp Vault you could do all that within Vault. Another possible solution would be ansible-vault which provides file-level encryption. The encrypted file can be checked in to your Version Control System. Obviously, you ...


Top 50 recent answers are included