OCI private keys are hard coded in the provider misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_OCI_1
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	ORACLE
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

When accessing OCI programmatically, users can use a password protected certificate. Including that password in your files that are checked into a repository leaves you exposed to account hijacking. We recommend using a secrets store or security tokens for secure access.

How to Fix

[source,go]

provider "oci" {

• private_key_password = "secretPassword" }

---