亚马逊S3 accesskey存储？

Question

I'm building a web application using amazon S3 as storage, and I was wondering if it's safe having the access key and the secret access key in plain text static string in the source code? I might be paranoid, but I'm not quite sure if I'm basically just handing out the access keys by doing this.

Answer 1

我把它放在应用程序配置或数据库中，这样你就可以在它受到损害时进行更改。