[MapServer-users] security of S3 credentials in Mapfile

[Even Rouault]

GDAL can read S3 credentials from the ~/.aws/credentials file that is 
used by the aws command line utility. You would also probably want to 
create credentials with read-only permission for use by Apache.


Le 22/12/2022 à 15:49, Marcin Niemyjski via MapServer-users a écrit :
> Hello,
>
> because of using private bucket as a place where I keep my rasters I'm 
> putting credentials in my mapfile as Enviromental Variables.
>
> The question is - Is it safe?
>
> Obviously, I do not want anyone mess with my data. Are there any tips 
> beyond Apache aliases to hide mapfile path?
>
> I already checked 
> https://mapserver.org/optimization/limit_mapfile_access.html#limit-mapfile-access
>
> The main goal is to keep credentials safe!
>
> Best,
> Marcin
>
> _______________________________________________
> MapServer-users mailing list
> MapServer-users at lists.osgeo.org
> https://lists.osgeo.org/mailman/listinfo/mapserver-users

-- 
http://www.spatialys.com
My software is free, but my time generally not.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/mapserver-users/attachments/20221222/e42224f9/attachment.htm>