Security issue with creating the AmazonS3 Data Connection via QRS API

klekovkinda — Fri, 15 Nov 2024 22:12:56 GMT

When I create the Amazon S3 bucket connection via the user interface. Access key and Secret key are hidden:
Connection string looks like:

CUSTOM CONNECT TO "provider=QvWebStorageProviderConnectorPackage.exe;sourceType=File_AmazonS3Connector;region=<REGION>;bucketName=<BUCKET_NAME>;"

But if I'm using the qrs api And provide the access key and secret key In the connection string, they are visible in the configuration in human readable format, and available for anyone who has an access to the QMC, data connection settings.
This is a body I send:

{
    "name": "AWS S3",
    "owner": {
        "name": "<USER>"
    },
    "connectionString": "CUSTOM CONNECT TO \"provider=QvWebStorageProviderConnectorPackage.exe;sourceType=File_AmazonS3Connector;region=<REGION>;bucketName=<BUCKET_NAME>;accessKey=<ACCESS_KEY>;secretKey=<SECRET_KEY>\"",
    "type": "QvWebStorageProviderConnectorPackage.exe",
    "username": "",
    "logOn": 0,
    "architecture": 0,
    "tags": [],
    "customProperties": [],
    "privileges": null,
    "schemaPath": null
}

This request created the data connection, data connection works as expected. But when I open the configuration I see:

Is there any way to create the Amazon S3 connection wia qrs API, so that the access key and secret will be not displayed in configuration?

Re: Security issue with creating the AmazonS3 Data Connection via QRS API

J_Lindberg — Wed, 08 Mar 2023 14:37:39 GMT

Hello @klekovkinda

I think this question has ended up in the wrong forum? In this forum we're able to help you with Qlik Application Automation related questions. Qlik Application Automation provides a no-code visual interface that helps you easily build automated analytics and data workflows. We do have a Amazon S3 connector in automations, but this doesn't seem to be used here.
It would be great if you could post this question in the forum related to the product you are using and you will get help there.

topic Re: Security issue with creating the AmazonS3 Data Connection via QRS API in Connectivity & Data Prep

Security issue with creating the AmazonS3 Data Connection via QRS API

Re: Security issue with creating the AmazonS3 Data Connection via QRS API