Secure/Masked Variables for Python Scripts
Hello PA Team,
I have a request regarding security in Python/R scripts within Data Flows.
Currently, I haven't found a secure way to pass sensitive credentials (like DB passwords or API keys) into a script.
If I use standard variables or even OS environment variables, anyone with "Edit" permissions to the model can simply modify the script to print the variable value to the output logs, exposing the secret.
Proposed Solution:
It would be great to have a "Secure Variable" type in the Model. These variables should be:
Masked in the UI.
Securely injected into the script runtime.
Ideally, masked in the output logs if a user tries to print them.
If there is already a recommended way to handle secrets safely without exposing them to other model editors, please let me know.
Thanks!