Open akrguda opened 1 year ago
André Hirter has knowhow and some ideas are at Marius site. Please contact them.
Positions: Evaluated positions, where a key can / should be created (depending on code, handling of these possible keys in the code): KeyVaultValues.xlsx
Sources: https://learn.microsoft.com/en-us/azure/key-vault/ https://learn.microsoft.com/en-us/azure/key-vault/keys/quick-create-java?tabs=azure-cli https://azure.github.io/azure-sdk-for-java/keyvault.html
Azure platform: https://portal.azure.com/#view/HubsExtension/RecentResources.ReactView
Created test applications:
As a stakeholder I want that every confidential parts in the software is outsourced in the security keyvault file so that nowbody outside the team can gets information about username, password, database connects and the github source is clean about confidential parts.
DoR:
Acceptance Criteria:
DoD: