This is an automated email from the ASF dual-hosted git repository.

pjfanning pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/pekko-connectors.git


The following commit(s) were added to refs/heads/main by this push:
     new 595f1b72d s3: discourage use of static credentials (#1819)
595f1b72d is described below

commit 595f1b72d959a679dc2bbe75196ded843c9afacb
Author: PJ Fanning <[email protected]>
AuthorDate: Wed Aug 5 16:44:26 2026 +0100

    s3: discourage use of static credentials (#1819)
---
 s3/src/main/resources/reference.conf | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/s3/src/main/resources/reference.conf 
b/s3/src/main/resources/reference.conf
index c095d11ed..7045c80ed 100644
--- a/s3/src/main/resources/reference.conf
+++ b/s3/src/main/resources/reference.conf
@@ -27,7 +27,10 @@ pekko.connectors.s3 {
       #
       # provider = anon
 
-      # static credentials
+      # static credentials — avoid in production; prefer environment variables,
+      # IAM roles, or the default provider chain instead.
+      # Embedding secrets in config files risks accidental exposure via version
+      # control, logs, or process listings.
       #
       # provider = static
       # access-key-id = ""


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to