Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Craft 3.1 project yaml contains S3 credentials #37

Closed
vanerp opened this issue Jan 23, 2019 · 2 comments
Closed

Craft 3.1 project yaml contains S3 credentials #37

vanerp opened this issue Jan 23, 2019 · 2 comments

Comments

@vanerp
Copy link

vanerp commented Jan 23, 2019

I'm loading the S3 settings via a volumes.php config with references to ENV variables form the .ENV file. When adding this S3 asset source to Craft 3.1 the AWS credentials are being stored in the project.yaml file. This also puts them into version control and is a potential security issue.
I know this is related to issue #35, but is there a way to prevent them from being added to the yaml?

@boboldehampsink
Copy link

Yes, use the #35 version

@brandonkelly
Copy link
Member

This issue is covered by the Sensitive Information Could Be Saved in project.yaml section in the Project Config docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants