Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

S3 input output plugin might leak passwords #12540

Open
nicenemo opened this issue Dec 30, 2020 · 2 comments
Open

S3 input output plugin might leak passwords #12540

nicenemo opened this issue Dec 30, 2020 · 2 comments

Comments

@nicenemo
Copy link

When you use minio or another S3 provider that uses path_style for buckets and
do not configure this with the force_path_style then logstash while fail with
a stacktrace which contains the S3 secret key. This was tested with secret key
and key identifier present in the config. Not tested with a config file yet.
probably config file is better.

@aaf1097
Copy link

aaf1097 commented Aug 12, 2021

@kares Is this still available to work on, if so I'd like to have a go at it?

@yaauie
Copy link
Member

yaauie commented Aug 13, 2021

@aaf1097 you are welcome to take a shot. The code-base for the S3 input plugin is https://github.com/logstash-plugins/logstash-input-s3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants