How to handle sensitive configuration information when deploying app-engine applications?
Example: I have an applications that needs to access an API providing an authentication token myApi = MyApi(token=my_private_sensible_token) I want to avoid having that private token in a configuration file that is part of the project. One solution that comes to mind is to isolate interaction with this service in a separate proxy application that is maintained by a restricted number of authorised people. App-engine allows to protect handlers with authentication and I could easily, in the proxy, allow only calls coming from an authorised app-engine consumer application. Different solutions I