Re:EC2's most dangerous feature
by djb_hackernews on Sunday October 09, 2016 @08:24AM
(#12670908)
If users can issue arbitrary commands on an instance then that instance should have zero Iam roles and should delegate actions to services running on separate instances.
The instances hosting our users go a step further and null route Metadata service requests via iptables.
Re:EC2's most dangerous feature
by jeremyjh on Sunday October 09, 2016 @09:11AM
(#12671047)
It isn't just about users, its also about malicious software you may accidentally install, if for example a library you use is compromised as has happened before with Ruby gems.
The instances hosting our users go a step further and null route Metadata service requests via iptables.