FANNG1 commented on PR #5713: URL: https://github.com/apache/gravitino/pull/5713#issuecomment-2510700461
> Hi, @FANNG1 > > According to the [AWS blog](https://aws.amazon.com/tw/blogs/security/a-safer-way-to-distribute-aws-credentials-to-ec2/), I believe there is a possibility that secret access keys may contain the `=` character. > > > Search for secret access keys: (?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=]). In English, this regular expression says: Find me 40-character, base-64 strings that don’t have any base 64 characters immediately before or after. Thanks for pointing this, could you do more investigate about whether the `Config` class in Gravitino supports `=` values? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
