Skip to content

Conversation

@ardelato
Copy link
Collaborator

@ardelato ardelato commented Oct 6, 2025

Description

We got an email from Google about using the same map key for both the frontend and backend applications. Let's split up the keys to apply individual restrictions to them
(frontend: website-restricted, backend: IP-restricted).

QA Notes:

  1. We will need to create an additional key and update Secrets Manager.
  2. We will then need to deploy this to the test cluster to confirm it works accordingly.

We got an email from Google about using the same map key for
both the frontend and backend applications. Let's split up the keys to
apply individual restrictions to them
(frontend: website-restricted, backend: IP-restricted).
Copy link
Member

@mlahargou mlahargou left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CR 📱

@ardelato
Copy link
Collaborator Author

ardelato commented Oct 6, 2025

QA 👍

I updated Secrets Manager and deployed the changes onto the test cluster. I confirmed we are still able to use the Maps feature from a whitelisted website and we get a 403 if we try to make requests with a different request url.

image image

@ardelato ardelato merged commit 3c3050a into hermes Oct 6, 2025
@ardelato ardelato deleted the fix--restrict-google-maps-key branch October 6, 2025 20:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants