This topic describes things you can do to secure the Eucalyptus Management
- Enable HTTPS for communications with the console and configure the console to use a
- We do not recommend the "Remember my keys" option for "Login to AWS" because it
stores AWS credentials in your browser's local storage and increases the security
risk of AWS credentials being compromised.
- Change the default session timeouts if needed. For more information, see Configure Session Timeouts.
- If you don't use the Management Console, we recommend that you disable
GetAccessToken (using euctl). For more
information, see Configure STS Actions.
- Turn off password autocomplete for the console by setting the
browser.password.save configuration option to false in the
console’s configuration file.
- If memcached is configured to be used by the console, make sure it’s not exposed
publicly because there is no authentication mechanism enabled out of the box. If the
default Eucalyptus-provided configuration is used, it accepts connections only from