Re:I Tried to Live Without the Tech Giants. It Was Impossible
by mcintyre1994 on Friday August 14, 2020 @01:00PM
(#24160334)
I didn't realise that KMS underlay AWS' internal infrastructure, literally the same KMS service that's exposed to users? Do you know if AWS' internal infrastructure is actually documented publicly in terms of how services fit together internally anywhere? Or is that all considered secret beyond what's exposed to users?
[ Parent
| on HN ]
Re:I Tried to Live Without the Tech Giants. It Was Impossible
by ragona on Friday August 14, 2020 @01:26PM
(#24160670)
Yeah, this stuff isn't secret. Note how if you encrypt your S3 bucket it uses a KMS CMK; that's an dependency between S3 and KMS, and yep it's the same KMS. This is true for probably over a hundred AWS services that rely on KMS; it's a "foundational" service. (As is S3.)