18
Was told to rotate my API keys monthly, ignored it, got burned
My old boss Dave swore by rotating keys every 30 days, I thought it was overkill, then last month a leaked key from a GitHub repo in Seattle cost us $4,200 in AWS charges before I caught it, anyone else learned this lesson the hard way?
1 comments
Log in to join the discussion
Log In1 Comment
nathan5454d ago
Rotating keys is just busywork if your repo access rules are actually solid.
1