KKeensafe Cloud Console eu-west-1 · prod

Infrastructure as code

Backend bucket: keensafe-private-backups-eu-west-1 · workspace: prod

State file

The current Terraform state for the production workspace is at /terraform/keensafe-prod.tfstate (JSON).

Modules

Misconfigurations:

.tfstate contains the RDS master password and the Stripe key in plaintext under resources[].instances[].attributes.
Helm values.yaml ships AWS access keys at the chart level.
Pulumi secure: field is base64-encoded, not encrypted, in lab state.