Where credentials live

In the CONNECTION, never in a mapping, a lookup or a JavaScript library. What is encrypted, what is exportable, and the export that carried a secret to a laptop. The connection is the only place OIC treats a value as a secret. It is stored encrypted, it is not displayed back after saving, and the platform knows it must be handled differently from configuration. THE THREE WRONG PLACES ARE ALL REACHABLE AND ALL LOOK LIKE THEY WORK. A token hard-coded in a mapping is visible to anybody who opens the mapper. A password in a lookup sits in a table Module 11 established has no version history and a wider edit permission than the integration itself. A key in a JavaScript library is worst: it is in code nobody reads and nothing in the console suggests it is there. AND THE EXPORT IS THE FAILURE THIS LESSON EXISTS FOR. Exporting…

In this module: Module 12 · Security: credentials, certificates and network

1. 1What an integration actually holds
2. 2Where credentials liveFree preview
3. 3The service account and least privilege
4. 4OAuth, and which grant to use
5. 5Certificates: trust, identity and expiry
6. 6Rotation without an outage
7. 7Network: allowlists and private endpoints
8. 8What ends up in a log
9. 9What breaks: four security failures
10. 10Lab briefing · Audit an integration for exposure