pullrequests Search Results · bucket language:JavaScript language:JavaScript language:JavaScript language:CSS language:JavaScript
Filter by
355k results
cli
dashboard
documentation
macos
tests
Description
Resolves security scan findings on the S3 buckets and API Gateway in template.yaml. All changes are additive (no
functionality removed) and validated against AWS documentation.
Findings ...
@rahulcs Please verify
/cc @amarts
... : PASS (flow, manifest, ciphertext-only). Not run against a real database or bucket.
Before activation (owner)
Off-site provider and bucket, age key custody, read-only database role (production SQL ...
workstream:platform
workstream:release-quality
... from going around the CDN:
- S3 with OAC and a private bucket, instead of a public website endpoint
- VPC origins
- for public origins, both the managed prefix list and a secret header ...