Thoughts on Path Env/Value Contention

rails-lambda / crypteia

🧱🔐 Rust Lambda Extension for any Runtime/Container to preload Secure Environment Variables!

https://lamby.cloud

MIT License

66 stars 7 forks source link

Closed metaskills closed 5 months ago

metaskills commented 2 years ago

Thanks to @cameronlynn for pointing this out. It is possible to use two paths where a value like SECRET would be in both.

X_CRYPTEIA_SSM1: x-crypteia-ssm-path:/myapp/1/env
X_CRYPTEIA_SSM2: x-crypteia-ssm-path:/myapp/2/env
SECRET: x-crypteia

In this case, there is no deterministic behavior on what the value of SECRET would be. Should we handle this? Document it? Etc?