Engineering Atlas
☰ Menu
PortfolioAtlasDeploySQLData ViewsEnvBites
PT
Engineering Atlas / Domains / Security
DOMAIN // SEC

Security

Secrets, authentication, application hardening and secure integration patterns.

STUDY5 connected entries
PRODUCTION0
PROJECT0
LAB0
STUDY5
Knowledge surface

What currently lives in this domain.

Depth grows from real work. Empty space is intentional; Study should never pretend to be Production.

snippet

3 entries

snippetstudy
Never Hardcode Secrets in SFMC Scripts

Audit Script Activities and Content Builder assets for embedded credentials and tokens.

snippetstudy
Webhook HMAC Verification — Canonical Pattern

Verify that an inbound webhook body was signed by the expected sender before processing side effects.

snippetstudy
Load Secrets from Environment — Keep Them Out of Git

Read runtime secrets from environment/configuration rather than embedding credentials in versioned source.

pattern

2 entries

patternstudy
Hardcoded Credentials in Scripts or Assets

Credentials embedded in SSJS, CloudPages or Content Builder become difficult to rotate, audit and protect.

patternstudy
Public Admin Surface by Convenience

Do not expose n8n/admin dashboards publicly merely because the webhook endpoints must be public.