Security

Orbit follows best practices for security in local and cloud deployments:

• Git: Use signed commits for all contributions (GitHub guide).
• AWS: Use SSO and roles for secure access. Prefer credential vendor or assume-role for AWS access.
• API Keys: Replace personal OpenAPI, LangSmith, and Bedrock keys with your own or request access.
• Docker: Secure Docker networks and volumes. Limit access to sensitive files.
• Database: Use strong passwords and manage access via Docker Compose and Postgres settings.

AWS Assume Role Example

aws sts assume-role --role-arn arn:aws:iam::123456788268:role/pyxis-ai-app --role-session-name ai-poc --duration-seconds 43200 --profile cred-vendor-pyxis

Populate credentials in your environment or VS Code launch.json as needed. Credentials expire after 12 hours.