https://www.chrismurton.uk/tags/security/ Recent content in security on Chris Murton Hugo -- gohugo.io Wed, 22 Feb 2017 18:00:00 +0000 https://www.chrismurton.uk/2017/02/22/how-to-rid-yourself-of-aws-api-access-keys/ Wed, 22 Feb 2017 18:00:00 +0000 https://www.chrismurton.uk/2017/02/22/how-to-rid-yourself-of-aws-api-access-keys/ It’s fairly legacy these days to use hardcoded IAM Access Key ID and Secret Access Key values to call the AWS API, which has spawned a variety of different ways to obtain and utilise IAM credentials. Wait, what’s wrong with hardcoded credentials? The issues are numerous, some of which have come to the surface because of data breaches. Dev put AWS keys on Github or leaked access keys resulting in a $6,000 bill for starters.