Challenge · Medium

Rotate It

A live payments API key leaked into logs, a backup and a shell history. Rotate the key, keep payments working, and scrub every copy of the old one.

secretsrotationgreplogs

Practises the module Secret management.

The ticket

SECURITY INCIDENT SI-77: payments key exposed

A debug flag made the payments service print its API key into its log, and that log was shared in a public chat. The key must be considered compromised.

Start the challenge →