Re:Infrastructure Security Without Slowing Down Developers
by macintux on Thursday May 07, 2020 @02:48PM
(#23106649)
I like the jumphost model we’re using in our current AWS accounts: dynamically-generated ecs instances that automatically shut down after a certain period of time.
[ Parent
| on HN ]
Re:Infrastructure Security Without Slowing Down Developers
by old-gregg on Thursday May 07, 2020 @03:03PM
(#23106869)
Heh, that's a neat idea and cheap to implement on top of existing SSH tooling!
Re:Infrastructure Security Without Slowing Down Developers
by xfitm3 on Thursday May 07, 2020 @09:59PM
(#23110606)
Is that model powered by something open source? I'm interested in learning more
Re:Infrastructure Security Without Slowing Down Developers
by macintux on Thursday May 07, 2020 @10:35PM
(#23110827)
It’s just a (mostly) simple bash script a co-worker wrote.
It relies on Amazon’s Session Manager plugin, importing the user’s public key with aws ec2 import-key-pair, and firing up a new instance on the relevant subnet with the appropriate role, security group, etc.
I rather doubt the company would allow even something this simple to be distributed, unfortunately, at least without lawyers getting involved, hardly worth it for a 100 line bash script.