Merge pull request #11676 from keynslug/fix/EMQX-11026/secret-access-…

…key-sensitive fix(ftconf): also mark `secret_access_key` key as sensitive
emqx · Sep 25, 2023 · 349a6d9 · 349a6d9
2 parents cedd90e + ddf6cdc
commit 349a6d9
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/apps/emqx_utils/src/emqx_utils.erl b/apps/emqx_utils/src/emqx_utils.erl
@@ -632,6 +632,9 @@ is_sensitive_key(<<"proxy-authorization">>) -> true;
 is_sensitive_key(secret) -> true;
 is_sensitive_key("secret") -> true;
 is_sensitive_key(<<"secret">>) -> true;
+is_sensitive_key(secret_access_key) -> true;
+is_sensitive_key("secret_access_key") -> true;
+is_sensitive_key(<<"secret_access_key">>) -> true;
 is_sensitive_key(secret_key) -> true;
 is_sensitive_key("secret_key") -> true;
 is_sensitive_key(<<"secret_key">>) -> true;
@@ -779,6 +782,7 @@ redact_test_() ->
         'proxy-authorization',
         secret,
         secret_key,
+        secret_access_key,
         security_token,
         token,
         bind_password

diff --git a/changes/ce/fix-11676.en.md b/changes/ce/fix-11676.en.md
@@ -0,0 +1 @@
+Hide few pieces of sensitive information from debug-level logs.