Skip to content

Commit 8fa3a41

Browse files
committed
improve readme
1 parent ed193a6 commit 8fa3a41

File tree

1 file changed

+2
-2
lines changed
  • aws-node-env-variables-encrypted-in-a-file

1 file changed

+2
-2
lines changed

aws-node-env-variables-encrypted-in-a-file/README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ This example demonstrates how to store secrets like API keys encrypted in your r
88

99
## Why?
1010

11-
While repository hosting services like Github or Bitbucket have very high security standards it's recommended to not store your unencrypted secrets there. In addition in larger teams not everybody needs to have access to theses secrets of your production environment.
11+
While repository hosting services like Github or Bitbucket have very high security standards it's recommended to not store your unencrypted secrets there. In addition in larger teams not everybody needs to have access to those secrets of your production environment.
1212

1313
Encrypting your secrets per stage and only adding the encrypted files into your repository is a sensible strategy to fulfill the previously described goals. The passwords to decrypt and encrypt the secrets files should only be shared between the necessary developers over a secure channel. In case you are using a Continuous Integration to deploy your infrastructure obviously this system must be aware of the passwords as well.
1414

@@ -99,4 +99,4 @@ serverless encrypt --stage prod --password 'v2]83WDneGt9AGXv]X6QfP9NW3^J&K3V'
9999

100100
# Important Note
101101

102-
Make sure the the secrets files are listed in .gitignore to make sure they are never checked into your repository.
102+
Make sure the the unencrypted secrets files are listed in .gitignore or similar to make sure they are never checked into your repository.

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy