Note that there are some explanatory texts on larger screens.

plurals
  1. USstudy
    primarykey
    data
    text
    plurals
    1. CO@stepanian, I found a EB HostManager script will remove .ebextensions in the Tomcat ROOT directory. The path of the script is /opt/elasticbeanstalk/hooks/appdeploy/enact/03deploy.sh. So the security issue may not happen in usual case. But I am sure that I ever directly access the files in .ebextensions, I don't know what situation will cause it to happen. About .ebextensions in WEB-INF, you can start a AWS Java Web Project in Eclipse. [The exposed WAR](http://phstudy.s3.amazonaws.com/aws-java-web-project.war) and [the eclipse project](http://phstudy.s3.amazonaws.com/aws-java-web-project.zip).
      singulars
    2. CO@stepanian, Amazon EB example seems to find this problem, they move `.ebextension` into `WEB-INF` directory. But the AWS SDK for Java tutorial still tells you to place `.ebextension` in `WebContent` directory. If you put them in `WebContent`, everyone can access the files in `.extensions` directly. AWS SDK for Java tutorial for Manage Tomcat Session State with Amazon DynamoDB: http://docs.aws.amazon.com/AWSSdkDocsJava/latest/DeveloperGuide/java-dg-tomcat-session-manager.html The screenshot: http://postimg.org/image/ldko0qwol
      singulars
    3. CO@stepanian, you are right, the folder is not accessible. But if you know the filename in .ebextentions folder, you can access the files in the .ebextentions directly. No matter what system you use. Some official EB Configuration File example directly put AccessKey and SecretKey in context.xml and place the context.xml in .ebextentions folder . If you know the rule of configuration file, you can directly access the context.xml.
      singulars
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload