News for hackers. Stuff that matters.

A comment on AWS Session Manager: less infrastructure, more features. Parent comment

Re:AWS Session Manager: less infrastructure, more features by WatchDog on Monday March 16, 2020 @06:03PM (#22598521)
There are so many AWS managed policies that provide access far beyond what one might suspect given the policy name and description. Implementing least privilege with IAM can be really difficult in any moderately complex environment.
[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by LilBytes on Monday March 16, 2020 @09:51PM (#22600645)
And close to impossible in highly complex environments. We're looking to adopt using AWS accounts to achieve a few objectives but one being reducing the blast radius of potential breaches and outages.
[ Parent | on HN ]