# Functionbeat package command creates zip archive with credentials visible in plaintext

**URL:** <https://discuss.elastic.co/t/functionbeat-package-command-creates-zip-archive-with-credentials-visible-in-plaintext/260569>\
**Category:** Beats\
**Tags:** functionbeat\
**Created:** [January 8, 2021, 5:30pm UTC](https://discuss.elastic.co/t/functionbeat-package-command-creates-zip-archive-with-credentials-visible-in-plaintext/260569 "2021-01-08T17:30:50Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ashort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashort/32/78953_2.png) [@ashort](https://discuss.elastic.co/u/ashort)\
**Post date:** [January 8, 2021, 5:30pm UTC](https://discuss.elastic.co/t/functionbeat-package-command-creates-zip-archive-with-credentials-visible-in-plaintext/260569/1 "2021-01-08T17:30:50Z")

</div>

Hi,

When I use the Functionbeat manager to package up Functionbeat and the Yaml file into a zip archive for use with AWS Lambda the zip archive is generated with the password for the Elasticsearch user in plaintext in the yaml file. This is the case even if I add the password to the functionbeat keystore and then reference it using the ${VAR} syntax provided in the documentation.

Example code

```auto
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["BLAH"]
  protocol: "https"
  username: "BLAH"
  password: ${ITS_A_SECRET}

```

When I generate the zip using the package command the yaml generated contains the password in plaintext.

Is this intentional? Perhaps I'm doing something wrong but it would be great to get some help as I can't find much in the way of help from the documentation 😃

Thank you,

Ash

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 5, 2021, 7:31pm UTC](https://discuss.elastic.co/t/functionbeat-package-command-creates-zip-archive-with-credentials-visible-in-plaintext/260569/2 "2021-02-05T19:31:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.