How to Secure Your Upstash App

1. Protect REST Tokens

Store Upstash REST tokens in environment variables. They provide full database access.

# Environment variables
UPSTASH_REDIS_REST_URL=...
UPSTASH_REDIS_REST_TOKEN=...

2. Use Read-Only Tokens

For read-only operations, create and use read-only tokens to limit exposure risk.

3. Implement Rate Limiting

Use Upstash's @upstash/ratelimit to protect your APIs from abuse.

import { Ratelimit } from '@upstash/ratelimit';
const ratelimit = new Ratelimit({
  redis: Redis.fromEnv(),
  limiter: Ratelimit.slidingWindow(10, '10 s'),
});

4. Secure Edge Deployments

Upstash REST API works at the edge. Ensure tokens aren't exposed in client-side code.

5. Don't Store Sensitive Data Unencrypted

Encrypt sensitive data before storing in Redis. Use application-level encryption.

6. Monitor Access Patterns

Use Upstash console to monitor for unusual access patterns that might indicate compromise.