title: Storing secret keys in php files
body: <p>I am using Amazon web services in my php application. Is it safe to store the secret aws access tokens in a config.php file that are linked to my php web service?</p>
  
  <p>I have been unable to download the file to look at the content, but isn't it possible to use a packet sniffer or something and be able to read the key and pass phrase?</p>
  
  <p>I know Amazon recommends using a token vending machine to create temporary credentials, instead of using the aws creds directly, but we are hoping to be able to skip implementing one.</p>