search

berenddeboer / cdk-rds-sql

A CDK construct that allows creating roles and databases an on Aurora Serverless Postgresql cluster.
Apache License 2.0
23 stars 11 forks source link

Password for the new role is logged #5

Closed moltar closed 6 months ago

moltar commented 1 year ago

The following line will log the password into the CloudWatch log for the Lambda handler:

https://github.com/berenddeboer/cdk-rds-sql/blob/2ee7dd1e969bb7b0d7291faa0d6b66f49c34498b/src/handler.ts#L254

screenshot-20230320T224908-s4jDaGWN@2x

berenddeboer commented 6 months ago

Yeah, oversight, logging is turned off, unless you enable it now.