I think situation is better with the latest changes (key is stored in mod-kb-ebsco-java module db instead of mod-configuration db) so better protected --but it is still stored in plain text. Would be best if there were a FOLIO recommended way for storing secrets
RM API Key is currently stored in mod-configuration and is used by both mod-kb-ebsco-java and mod-codex-ekb.
The key is stored in plain text and should be encrypted.
Discussions is slack #tech-leads around a general approach to provide secure encrypted storage in FOLIO. Also notes current technique used by edge apis for this
https://folio-project.slack.com/archives/CH12W8XCH/p1565187165007800
Investigate/implement changes for this in folio-holdingsiq-client
Deliverable
Need to propose a solution that is presented to the team to determine next steps
Timebox
8hrs - 12 hrs