Safe way to backup env.yml - Serverless FrameworkWhat is the best way to implement “remember me” for a website?Best way to store password in databaseHow safe is it to host sensitive data on repository sites like github, bitbucket, etc.?Dropwizard configuration.yml security issues (where to save and should it contain passwords)Populating Docker containers with sensitive information using kubernetesHow to securely use credentials outside web.config for ASP.NET & AzureBacking up a Serverless Framework deploymentServerless Framework and multiple AWS profiles.NetCore 2.0 secure store credentials in production “on premise” serversHow can I improve the way I'm managing my secret API keys for my NodeJS app that's hosted on Heroku
Is it tax fraud for an individual to declare non-taxable revenue as taxable income? (US tax laws)
Writing rule stating superpower from different root cause is bad writing
Prove that NP is closed under karp reduction?
Why does Kotter return in Welcome Back Kotter?
Fully-Firstable Anagram Sets
TGV timetables / schedules?
Is it important to consider tone, melody, and musical form while writing a song?
If I cast Expeditious Retreat, can I Dash as a bonus action on the same turn?
Have astronauts in space suits ever taken selfies? If so, how?
Is it legal for company to use my work email to pretend I still work there?
How can I prevent hyper evolved versions of regular creatures from wiping out their cousins?
Why doesn't Newton's third law mean a person bounces back to where they started when they hit the ground?
Has the BBC provided arguments for saying Brexit being cancelled is unlikely?
Is it possible to do 50 km distance without any previous training?
Show that if two triangles built on parallel lines, with equal bases have the same perimeter only if they are congruent.
Font hinting is lost in Chrome-like browsers (for some languages )
What are the differences between the usage of 'it' and 'they'?
How much RAM could one put in a typical 80386 setup?
Is this a crack on the carbon frame?
Why don't electron-positron collisions release infinite energy?
Risk of getting Chronic Wasting Disease (CWD) in the United States?
How did the USSR manage to innovate in an environment characterized by government censorship and high bureaucracy?
What is the word for reserving something for yourself before others do?
Why Is Death Allowed In the Matrix?
Safe way to backup env.yml - Serverless Framework
What is the best way to implement “remember me” for a website?Best way to store password in databaseHow safe is it to host sensitive data on repository sites like github, bitbucket, etc.?Dropwizard configuration.yml security issues (where to save and should it contain passwords)Populating Docker containers with sensitive information using kubernetesHow to securely use credentials outside web.config for ASP.NET & AzureBacking up a Serverless Framework deploymentServerless Framework and multiple AWS profiles.NetCore 2.0 secure store credentials in production “on premise” serversHow can I improve the way I'm managing my secret API keys for my NodeJS app that's hosted on Heroku
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
It's best practice to put sensitive environment variables into env.yml and reference them in serverless.yml. Of course, this also means not checking env.yml into a code repository.
So where's a safe place to store a backup of env.yml? We have a number of microservices, so we're accumulating several env.yml files for our projects. Even sharing them among devs and keeping them updated can become a bit of an issue - they really could benefit from version control but security trumps convenience so we keep them out of git.
I'd be interested to hear how others manage secrets config in general.
security serverless-framework
asked Mar 9 at 2:50
Andrew GoldieAndrew Goldie
165
add a comment |
It's best practice to put sensitive environment variables into env.yml and reference them in serverless.yml. Of course, this also means not checking env.yml into a code repository.
So where's a safe place to store a backup of env.yml? We have a number of microservices, so we're accumulating several env.yml files for our projects. Even sharing them among devs and keeping them updated can become a bit of an issue - they really could benefit from version control but security trumps convenience so we keep them out of git.
I'd be interested to hear how others manage secrets config in general.
security serverless-framework
asked Mar 9 at 2:50
Andrew GoldieAndrew Goldie
165
See serverless.com/blog/serverless-secrets-api-keys
– Alex
Mar 9 at 23:05
Thank you @Alex! The AWS Parameter Store looks like a real possibility for us.
– Andrew Goldie
Mar 10 at 2:36
add a comment |
It's best practice to put sensitive environment variables into env.yml and reference them in serverless.yml. Of course, this also means not checking env.yml into a code repository.
So where's a safe place to store a backup of env.yml? We have a number of microservices, so we're accumulating several env.yml files for our projects. Even sharing them among devs and keeping them updated can become a bit of an issue - they really could benefit from version control but security trumps convenience so we keep them out of git.
I'd be interested to hear how others manage secrets config in general.
security serverless-framework
asked Mar 9 at 2:50
Andrew GoldieAndrew Goldie
165
It's best practice to put sensitive environment variables into env.yml and reference them in serverless.yml. Of course, this also means not checking env.yml into a code repository.
So where's a safe place to store a backup of env.yml? We have a number of microservices, so we're accumulating several env.yml files for our projects. Even sharing them among devs and keeping them updated can become a bit of an issue - they really could benefit from version control but security trumps convenience so we keep them out of git.
I'd be interested to hear how others manage secrets config in general.
security serverless-framework
security serverless-framework
asked Mar 9 at 2:50
Andrew GoldieAndrew Goldie
165
asked Mar 9 at 2:50
Andrew GoldieAndrew Goldie
165
asked Mar 9 at 2:50
Andrew GoldieAndrew Goldie
165
asked Mar 9 at 2:50
Andrew GoldieAndrew Goldie
165
asked Mar 9 at 2:50
Andrew GoldieAndrew Goldie
165
165
See serverless.com/blog/serverless-secrets-api-keys
– Alex
Mar 9 at 23:05
Thank you @Alex! The AWS Parameter Store looks like a real possibility for us.
– Andrew Goldie
Mar 10 at 2:36
add a comment |
See serverless.com/blog/serverless-secrets-api-keys
– Alex
Mar 9 at 23:05
Thank you @Alex! The AWS Parameter Store looks like a real possibility for us.
– Andrew Goldie
Mar 10 at 2:36
See serverless.com/blog/serverless-secrets-api-keys
– Alex
Mar 9 at 23:05
See serverless.com/blog/serverless-secrets-api-keys
– Alex
Mar 9 at 23:05
Thank you @Alex! The AWS Parameter Store looks like a real possibility for us.
– Andrew Goldie
Mar 10 at 2:36
Thank you @Alex! The AWS Parameter Store looks like a real possibility for us.
– Andrew Goldie
Mar 10 at 2:36
add a comment |
1 Answer
1
active
oldest
votes
While the question was specifically about management of env.yml files, the bigger underlying question is how to manage sensitive environment variables. The link in the comment from Alex is all I needed. Our solution is so AWS-oriented that the AWS Parameter Store is worth exploring.
Alex DeBrie's article
Yan Cui's article on referencing parameter store values at runtime
answered Mar 10 at 2:41
Andrew GoldieAndrew Goldie
165
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55073549%2fsafe-way-to-backup-env-yml-serverless-framework%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
While the question was specifically about management of env.yml files, the bigger underlying question is how to manage sensitive environment variables. The link in the comment from Alex is all I needed. Our solution is so AWS-oriented that the AWS Parameter Store is worth exploring.
Alex DeBrie's article
Yan Cui's article on referencing parameter store values at runtime
answered Mar 10 at 2:41
Andrew GoldieAndrew Goldie
165
add a comment |
While the question was specifically about management of env.yml files, the bigger underlying question is how to manage sensitive environment variables. The link in the comment from Alex is all I needed. Our solution is so AWS-oriented that the AWS Parameter Store is worth exploring.
Alex DeBrie's article
Yan Cui's article on referencing parameter store values at runtime
answered Mar 10 at 2:41
Andrew GoldieAndrew Goldie
165
add a comment |
While the question was specifically about management of env.yml files, the bigger underlying question is how to manage sensitive environment variables. The link in the comment from Alex is all I needed. Our solution is so AWS-oriented that the AWS Parameter Store is worth exploring.
Alex DeBrie's article
Yan Cui's article on referencing parameter store values at runtime
answered Mar 10 at 2:41
Andrew GoldieAndrew Goldie
165
While the question was specifically about management of env.yml files, the bigger underlying question is how to manage sensitive environment variables. The link in the comment from Alex is all I needed. Our solution is so AWS-oriented that the AWS Parameter Store is worth exploring.
Alex DeBrie's article
Yan Cui's article on referencing parameter store values at runtime
answered Mar 10 at 2:41
Andrew GoldieAndrew Goldie
165
edited Mar 10 at 11:59
answered Mar 10 at 2:41
Andrew GoldieAndrew Goldie
165
answered Mar 10 at 2:41
Andrew GoldieAndrew Goldie
165
answered Mar 10 at 2:41
Andrew GoldieAndrew Goldie
165
165
add a comment |
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55073549%2fsafe-way-to-backup-env-yml-serverless-framework%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
See serverless.com/blog/serverless-secrets-api-keys
– Alex
Mar 9 at 23:05
Thank you @Alex! The AWS Parameter Store looks like a real possibility for us.
– Andrew Goldie
Mar 10 at 2:36