arcgis-cookbook icon indicating copy to clipboard operation
arcgis-cookbook copied to clipboard

[Enhancement] Support for encrypted databags

Open ClaesGIS opened this issue 6 years ago • 2 comments

Idea

To further improve this cookbook I would like to be able to use encrypted data bags to store sensitive information. To name a few:

  • server['admin_password']
  • server['keystore_password']
  • portal['security_question'] & portal['security_question_answer']

Ideas for implementation

  • Specify the bag name and key as an attribute
  • Specify the location of the shared secret
  • Perhaps do something with environments

Edit: Keep in mind I might be wrong about how data bags should be used.

ClaesGIS avatar Apr 25 '19 10:04 ClaesGIS

I agree. The current documentation suggests storing credentials in plain text is okay, but it is actually really insecure.

tsmalls93 avatar Jun 27 '19 17:06 tsmalls93

agreed. This would be very useful for our environment as well.

slootsky avatar Aug 02 '19 17:08 slootsky