From 12a94f8206cf157a9ac73a0139dee1f2df13b939 Mon Sep 17 00:00:00 2001 From: ykethan Date: Mon, 23 Dec 2024 15:21:17 -0500 Subject: [PATCH] add callout for branch env variables --- .../fullstack-branching/secrets-and-vars/index.mdx | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/pages/[platform]/deploy-and-host/fullstack-branching/secrets-and-vars/index.mdx b/src/pages/[platform]/deploy-and-host/fullstack-branching/secrets-and-vars/index.mdx index 22e69890839..00f19dcacb0 100644 --- a/src/pages/[platform]/deploy-and-host/fullstack-branching/secrets-and-vars/index.mdx +++ b/src/pages/[platform]/deploy-and-host/fullstack-branching/secrets-and-vars/index.mdx @@ -136,6 +136,13 @@ build: - npm run build ``` + + +Note: do not store secret values in environment variables. Environment variables values are rendered in plaintext to the build artifacts and can be accessed by anyone with access to the build artifacts or [get-app](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/amplify/get-app.html) command. + + + + With the implementation above, the environment variable is written in a `.env` file. However, you can write it to any file depending on your platform.