数据管道
data-warehouse-security
更新于 2026-09-13
Data Warehouse · 安全规则
Security rules for Data Warehouse: boundary validation, server-side authorisation and zero secret leakage.
- 技术栈
- Data Warehouse
- 主题
- 安全
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Validate and normalise every input at the boundary it enters the system
- ✓ Authorise on the server against the authenticated principal, never on client claims
- ✓ Keep secrets out of repositories, logs and error messages
✕ 常见反模式
- ✕ Trusting headers or parameters that a client can set freely
- ✕ Disabling TLS verification or CSRF protection to unblock a test
- ✕ Wide-scope tokens with no expiry
◎ 交付前验证
- ◎ Row counts and key uniqueness compared against the previous run
- ◎ Backfill path tested on a partition
- ◎ Lineage graph updated for the new source