News for hackers. Stuff that matters.

A comment on CapOneMe – a vulnerable cloud environment to demonstrate the Capital One breach. Parent comment

Re:CapOneMe – a vulnerable cloud environment to demonstrate ... by aeternum on Friday December 27, 2019 @05:03PM (#21895137)
And now a single user has access, such scalability!
[ Parent | on HN ]
Re:CapOneMe – a vulnerable cloud environment to demonstrate ... by zbruhnke on Friday December 27, 2019 @05:26PM (#21895288)
Well technically this could also be a group.

I don’t know why all the hate for IAM permissions here.

They are complicated but also extremely powerful if setup correctly.

We manage all of our IAM policies and groups with terraform and it’s incredibly easy to understand imho

[ Parent | on HN ]
Re:CapOneMe – a vulnerable cloud environment to demonstrate ... by caro_douglos on Friday December 27, 2019 @05:49PM (#21895471)
Hella hate. Personally I found grappling with what they were initially difficult but then I finally dug in and watched howto propaganda...great job whoever did that at amazon. It’s the one thing I don’t hate about the company. [1]

It’s a ton easier for on boarding and giving contractors temporary access to resources.

*former worker at 3rd party merchant

[1] https://www.aws.training/LearningLibrary

[ Parent | on HN ]