OWASP/wrongsecrets

Log secret encoded from your cloud app towards the logging solution of your cloudprovider.

Open

#345 opened on Jul 11, 2022

View on GitHubContributor guide
 (0 comments) (0 reactions) (0 assignees)Java (601 forks)github user discovery
New Challengehelp wanted

Repository metrics

Stars
 (1,457 stars)
PR merge metrics
 (Avg merge 4d 1h) (29 merged PRs in 30d)

Description

Have a challenge for all 3 cloudproviders, where we log the actual secret inot the logs of the cloudprovider only.

  • log secret in AWS Cloudwatch
  • log secret in GCP stackdriver
  • log secret in Azure log Analytics

Contributor guide

Research direction
Implement logging of a secret to AWS CloudWatch, GCP Stackdriver, and Azure Log Analytics. For each cloud provider, use their respective Java SDK to write a log entry containing the secret. Ensure the log entry is visible in the cloud provider's log console. Research the specific API calls and authentication methods for each provider.
Tech stack
javaawsgcpazure
Domain
cloudsecurity
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
AWS accountGCP accountAzure accountJava
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
50