News for hackers. Stuff that matters.

A comment on Former Cisco engineer pleads guilty to causing Webex account chaos. Parent comment

Re:Former Cisco engineer pleads guilty to causing Webex acco... by dragonwriter on Sunday August 30, 2020 @12:32PM (#24323889)
> Aren't there protections in AWS

For this, in general, the answer is: (1) yes, IAM permissions, and (2) yes, if you configure them, and they often have a cost.

> Wouldn't AWS step in and help a company like Cisco if something horrible went wrong?

If Cisco asked, probably. But some things are inherently non-trivial to recover from once you've allowed them to happen. AWS can help, but they aren't magic.

[ Parent | on HN ]
Re:Former Cisco engineer pleads guilty to causing Webex acco... by WrtCdEvrydy on Sunday August 30, 2020 @01:29PM (#24324312)
Deletion Protection is amazing, but the true way to fix this is to use IAM roles, and groups.

Remove the user that is being terminated from the group and 'voila', it is safe.

[ Parent | on HN ]