Codebuild environment variable type is plaintext - Complete Cloud Security in Minutes - Orca Security

Data protection

Codebuild environment variable type is plaintext

Risk Level

Informational (4)

Platform(s)

Compliance Frameworks

Description

Codebuild generates deployable artifacts by compiling the source code, running unit tests, and generating deployable artifacts. Never save AWS access key ID or AWS secret access key authentication credentials in clear text, since this could result in data exposure and unauthorized access.

Recommended Mitigation

It is recommended using Amazon EC2 Systems Manager Parameter Store or AWS Secrets Manager for CodeBuild, at the Codebuild environment variables. For more details: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp-controls.html#fsbp-codebuild-2

See Orca in action

See Orca in action-> View a 10 minute recorded demo or sign up for a personalized one-on-one walk-through.