Skip to content

Expose the secret only during runtime #22

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
robin-thomas opened this issue Sep 17, 2023 · 0 comments
Open

Expose the secret only during runtime #22

robin-thomas opened this issue Sep 17, 2023 · 0 comments
Labels
enhancement New feature or request help wanted Extra attention is needed

Comments

@robin-thomas
Copy link
Owner

robin-thomas commented Sep 17, 2023 •
edited
Loading

Rather than exposing the secret during the build stage (sls deploy), figure out a way whereby the secret shall be exposed only during runtime.

Some possible ways:

  1. Replace all instances of process.env.SECRET_ENV_VAR with a shim that connects to AWS Secrets Manager and retrieve the secret during runtime
  2. Encrypts the secret during build stage, and decrypt it during runtime
  3. Inject the secret into code (not safe, since the secret can be determined by anyone who can see the lambda code)
@robin-thomas robin-thomas added enhancement New feature or request help wanted Extra attention is needed labels Sep 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@robin-thomas