hasura/graphql-engine
1
0
Fork 0
mirror of https://github.com/hasura/graphql-engine.git synced 2024-12-15 01:12:56 +03:00
Code Issues Projects Releases Wiki Activity

Add statement about env vars over declared values for db conn strings

Browse Source 
PR-URL: https://github.com/hasura/graphql-engine-mono/pull/7711
GitOrigin-RevId: e706fe10d033c84439e1f2f81277919777d4f22b
This commit is contained in:
Chris Martin 2023-01-30 10:24:41 -05:00 committed by hasura-bot
parent 9882ddb2a5
commit c34bae303d
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/docs/deployment/best-practices/security.mdx
View File

@ -112,6 +112,8 @@ GraphQL Engine server.
Hasura GraphQL Engine communicates with your data sources(s) via ODBC connection strings. This means Hasura has the same
permissions as the provided credentials in the connection string.
- Use environment variables rather than a hardcoded value when configuring the database connection string. This environment variable can then be reused in the other development environments (e.g., staging or production) while containing a reference to the environment-specific database connection string. This is necessary for a seamless CI/CD implementation.
- Review the database permissions allocated via the provided credentials to ensure the level of access granted to Hasura
is appropriate.