Heroku is no longer the hobbyist's friend

Re:Heroku is no longer the hobbyist's friend by shostack on Monday October 19, 2015 @04:48PM (#10415624)

Since I'm not at all confident in my abilities to secure things properly yet, am I at any risk of racking up a massive bill from a hacked account if I go with the AWS free tier? Or is that simply not a possibility?

[ Parent | on HN ]

Re:Heroku is no longer the hobbyist's friend by toomuchtodo on Monday October 19, 2015 @04:52PM (#10415651)

Enable two factor auth on your AWS account. Chances of fraud quickly approach zero unless your AWS API creds are leaked. You should always be using an IAM account that has only the privileges your application requires.

[ Parent | on HN ]

Re:Heroku is no longer the hobbyist's friend by smt88 on Monday October 19, 2015 @05:08PM (#10415776)

It's possible. Security on AWS can certainly be tricky. It's safer to use ElasticBeanstalk if you don't feel confident in your security knowledge, since it manages keys and IAM roles for you.

[ Parent | on HN ]