You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@cassandra.apache.org by "Bernardo Botella Corbi (Jira)" <ji...@apache.org> on 2026/09/21 09:44:00 UTC

[jira] [Created] (CASSSIDECAR-500) Sanitize/Nullify Cloud Credentials on RestoreJob Completion

Bernardo Botella Corbi created CASSSIDECAR-500:
--------------------------------------------------

             Summary: Sanitize/Nullify Cloud Credentials on RestoreJob Completion
                 Key: CASSSIDECAR-500
                 URL: https://issues.apache.org/jira/browse/CASSSIDECAR-500
             Project: Sidecar for Apache Cassandra
          Issue Type: Bug
          Components: Bulk Analytics
            Reporter: Bernardo Botella Corbi


When a RestoreJob uses STATIC cloud credentials, secrets are stored in clear text within the sidecar_internal tables. Leaving them there for 90 days by default poses a security risk, especially since completed jobs are never replayed.

The proposal is to update the job lifecycle manager to automatically nullify or redact sensitive credential fields from the stored payload as soon as a job reaches a terminal state (SUCCEEDED, FAILED, or ABORTED), while preserving the execution logs and metadata for auditing.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org