https://cloud.tencent.com/document/product/436/56390
Security Advisory Master Account API keys grant full control over all cloud resources associated with the account. If compromised due to improper handling, this could lead to severe security incidents—such as server intrusion, or the encryption (via ransomware) or deletion of critical data assets—and would prevent the rapid containment of damage through the immediate restriction of permissions.
It is recommended to utilize an STS Token-based temporary credential scheme for programmatic access. Temporary credentials feature an automatic expiration mechanism, thereby fundamentally mitigating the security risks associated with long-term exposure.
Except expiration, STS approach avoids exposing permanent keys to clients. qcloud-cos-sts-sdk can be used to create you own STS service.
If the use of an API key is absolutely necessary, it is recommended to use a sub-user key. Furthermore, adhere to the "Principle of Least Privilege" by precisely configuring only the specific permissions required for the sub-user, thereby effectively isolating security risks.
Codebuddy Code setting locaion
Add four environment variables, see the prerequisite above.
{
"env": {
"TENCENTCLOUD_SECRET_ID": "",
"TENCENTCLOUD_SECRET_KEY": "",
"TENCENTCLOUD_REGION": "",
"TENCENTCLOUD_COS_BUCKET": ""
}
}
Find the latest release from here and download compressed file
Unzip backup-to-cloud.md and backup-to-cloud in compressed file to loaction
Structure shown below
├── .codebuddy
│ ├── commands
│ │ ├── backup-to-cloud # Scripts needed
│ │ ├── backup-to-cloud.md # Command description
/export. Choose second options, save to file. Enter the file name, e.g. conversation.txt/backup-to-cloud conversation.txt. Then it will be saved to cloud.