💼 1.13 Ensure API keys are restricted to use by only specified Hosts and Apps
- Contextual name: 💼 1.13 Ensure API keys are restricted to use by only specified Hosts and Apps
- ID:
/frameworks/cis-gcp-v1.1.0/01/13 - Located in: 💼 1 Identity and Access Management
Description​
Unrestricted keys are insecure because they can be viewed publicly, such as from within a browser, or they can be accessed on a device where the key resides. It is recommended to restrict API key usage to trusted hosts, HTTP referrers and apps.
Similar​
- Internal
- ID:
dec-c-874d77eb
- ID:
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|