Can we configure the AWS secrets on spring boot app without using credentials (access and secret key)? If Yes, what procedures to follow. If No, what steps to take for hiding it other than the resource files(application.yml or application.properties). Thank you in advance.

CodePudding user response：

If something could access your AWS secrets without any credentials, that would be a huge security issue.

First, you should read the official documentation for providing AWS credentials to Java applications.

Then you should probably use environment variables for providing credentials when running your application outside of AWS, and use IAM roles assigned to your compute service (EC2, EKS, ECS or Lambda) when your application is running on AWS.

You should never hard-code the credentials in your application.