Skip to content

Commit

Permalink
Update ROPE-SEE per blowdart /2
Browse files Browse the repository at this point in the history
  • Loading branch information
Rick-Anderson committed Oct 8, 2024
1 parent 211cf9e commit dc9dd2c
Showing 1 changed file with 6 additions and 1 deletion.
7 changes: 6 additions & 1 deletion aspnetcore/security/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -61,7 +61,7 @@ Managed identities are a secure way to authenticate to services without needing
* [Managed identities for App Service and Azure Functions](/azure/app-service/overview-managed-identity)
* [Secure authentication flows](/entra/identity-platform/authentication-flows-app-scenarios#web-app-that-signs-in-a-user)

When the app is deployed to a test server, an environment variable can be used to set the connection string to a test database server. For more information, see [Configuration](xref:fundamentals/configuration/index). An environment variable should ***NEVER*** be used to store a production connection string.
When the app is deployed to a test server, an environment variable can be used to set the connection string to a test database server. For more information, see [Configuration](xref:fundamentals/configuration/index). We recommend environment variables not be used to store a production connection string as it's not the most secure approach.

For more information, see:

Expand All @@ -70,6 +70,11 @@ For more information, see:
* [Azure services that can use managed identities to access other services](/entra/identity/managed-identities-azure-resources/managed-identities-status)
* [IETF OAuth 2.0 Security Best Current Practice](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics#section-2.4)

For information on other cloud providers, see:

* [AWS (Amazon Web Services): AWS Key Management Service (KMS)](https://aws.amazon.com/kms/)
* [Google Cloud Key Management Service overview](https://cloud.google.com/kms/docs/key-management-service)

## Additional resources

* <xref:security/authentication/identity>
Expand Down

0 comments on commit dc9dd2c

Please sign in to comment.