Auth/ACL protection mechanism for configuration tarball on S3/httpd side

edf-hpc / puppet-hpc

Generic Puppet Configuration for HPC Clusters

http://edf-hpc.github.io/puppet-hpc/

GNU General Public License v2.0

13 stars 4 forks source link

Auth/ACL protection mechanism for configuration tarball on S3/httpd side #124

Open rezib opened 6 years ago

rezib commented 6 years ago

To protect against malicious configuration tarball download (its contains encrypt secrets), a auth and/or ACL mechanism must be implement on S3 and httpd side.