Skip to main content

Suggest an Idea

Vote for your favorite Qlik product ideas and add your own suggestions.

Announcements
This page is no longer in use. To suggest an idea, please visit Browse and Suggest.

QRS API Amazon S3 bucket connection security improvements

klekovkinda
Partner - Contributor III
Partner - Contributor III

QRS API Amazon S3 bucket connection security improvements

When I create the Amazon S3 bucket connection via the user interface. Access key and Secret key are hidden: 
Connection string looks like:

CUSTOM CONNECT TO "provider=QvWebStorageProviderConnectorPackage.exe;sourceType=File_AmazonS3Connector;region=<REGION>;bucketName=<BUCKET_NAME>;"


 But if I'm using the qrs api And provide the access key and secret key In the connection string, they are visible in the configuration in human readable format, and available for anyone who has an access to the QMC, data connection settings. 
This is a body I send:

{
"name": "AWS S3",
"owner": {
"name": "<USER>"
},
"connectionString": "CUSTOM CONNECT TO \"provider=QvWebStorageProviderConnectorPackage.exe;sourceType=File_AmazonS3Connector;region=<REGION>;bucketName=<BUCKET_NAME>;accessKey=<ACCESS_KEY>;secretKey=<SECRET_KEY>\"",
"type": "QvWebStorageProviderConnectorPackage.exe",
"username": "",
"logOn": 0,
"architecture": 0,
"tags": [],
"customProperties": [],
"privileges": null,
"schemaPath": null
}


This request created the data connection, data connection works as expected. But when I open the configuration I see the access key ans secret key in the connection string.
I expect that secrets are not shown in the configuration after I have created the connection. 

Screenshot 2023-01-23 at 16.03.43.png

Tags (1)
2 Comments
Meghann_MacDonald

From now on, please track this idea from the Ideation portal. 

Link to new idea

Meghann

NOTE: Upon clicking this link 2 tabs may open - please feel free to close the one with a login page. If you only see 1 tab with the login page, please try clicking this link first: Authenticate me! then try the link above again. Ensure pop-up blocker is off.

Ideation
Explorer II
Explorer II
 
Status changed to: Closed - Archived