News for hackers. Stuff that matters.

A comment on Secure Access to 100 AWS Accounts. Parent comment

Re:Secure Access to 100 AWS Accounts by user5994461 on Sunday March 11, 2018 @02:07PM (#16564051)
>>> By using many accounts, you create clear isolation boundaries that require opt-in sharing.

In theory yes. In practice, you will achieve the opposite of that.

Developers and ops will have to juggle between 10 keys and accounts to get anything. The keys will end up saved and written all over the systems. It will be impossible to have audit between all the accounts and access.

[ Parent | on HN ]
Re:Secure Access to 100 AWS Accounts by ejcx on Sunday March 11, 2018 @02:10PM (#16564059)
Op here. I don't think you read the blog post! Our entire engineering org has a grand total of 0 AWS keys!

Per-account isolation is great for security and especially reliability, if you run in to constant ratelimit issues like we do.

[ Parent | on HN ]