Security

Key security points for self-hosted CloudQuery instances. Follow these best practices when running CloudQuery on your own infrastructure.

Integration Authentication Credentials

• Integration Authentication Credentials should always be read-only.
• The machine where CloudQuery is running should be secured with the correct permissions, as it contains the credentials to your cloud infrastructure.

CloudQuery Database

Even though in most cases the CloudQuery database contains only configuration and meta-data, you should protect it and keep it secure with correct access and permissions.

Next Steps

• Environment Variables - Manage secrets with environment variables
• Generate API Key - Create API keys for authenticated access
• Proxy Configuration - Route traffic through proxies