News for hackers. Stuff that matters.

A comment on AWS Elasticsearch: a fundamentally-flawed offering. Parent comment

Re:AWS Elasticsearch: a fundamentally-flawed offering by all_usernames on Friday October 11, 2019 @07:21PM (#21229304)
Netflix open sourced a similar tool that watches API calls for a Role and then suggests minimum privilege changes to the attached policy document: https://github.com/Netflix/repokid
[ Parent | on HN ]
Re:AWS Elasticsearch: a fundamentally-flawed offering by ajb on Saturday October 12, 2019 @06:41PM (#21236872)
That's interesting. That can only work if there's some way of introspecting permissions - which I didn't realise existed. Mine works by experiment. I wonder how fine grained their way is.
[ Parent | on HN ]
Re:AWS Elasticsearch: a fundamentally-flawed offering by bifrost on Saturday October 12, 2019 @11:50PM (#21238242)
Ooooh I gotta check that out!
[ Parent | on HN ]