News for hackers. Stuff that matters.

A comment on Former Cisco engineer pleads guilty to causing Webex account chaos. Parent comment

Re:Former Cisco engineer pleads guilty to causing Webex acco... by user5994461 on Sunday August 30, 2020 @02:02PM (#24324596)
Set the termination protection flag on critical instances (like databases), then they cannot be deleted programmatically. This works really really well.
[ Parent | on HN ]
Re:Former Cisco engineer pleads guilty to causing Webex acco... by dragonwriter on Sunday August 30, 2020 @02:10PM (#24324654)
> Set the termination protection flag on critical instances (like databases), then they cannot be deleted programmatically.

Well, not accidentally, but the flag itself can be cleared programmatically, so protected instances can definitely still be maliciously deleted programmatically, if the actor has sufficient access.

[ Parent | on HN ]
Re:Former Cisco engineer pleads guilty to causing Webex acco... by user5994461 on Sunday August 30, 2020 @02:18PM (#24324726)
Oh really? I thought the only way was to go to the web UI and and select instances to remove the flag.
[ Parent | on HN ]
Re:Former Cisco engineer pleads guilty to causing Webex acco... by dragonwriter on Sunday August 30, 2020 @02:25PM (#24324780)
Quick googling found CLI instructions (for both the generic and powershell CLIs), and those are just wrappers around the APIs.
[ Parent | on HN ]