ConsoleMe: A Central Control Plane for AWS Permissions and Access

Posted by jbredeche on Wednesday March 10, 2021 @11:25PM
from the netflixtechblog.com dept.

https://netflixtechblog.com/consoleme-a-central-control-plane-for-aws-permissions-and-access-fd09afdd60a8

( 5 comments | 67 points | on HN )

Re:ConsoleMe: A Central Control Plane for AWS Permissions an... by loloquwowndueo on Friday March 12, 2021 @09:25AM (#26436121)

ConsoleMe evokes the word “consolation” first thing i thought when I read the title. Interestingly the article mentions the naming is purposeful and the CLI tool is called “weep”. Hahah clever :)

[ Parent | on HN ]

Re:ConsoleMe: A Central Control Plane for AWS Permissions an... by theopsguy on Friday March 12, 2021 @02:12PM (#26439641)

Am I right that policies and roles managed through consoleme should not be managed by terraform?

[ Parent | on HN ]

Re:ConsoleMe: A Central Control Plane for AWS Permissions an... by vmsp on Friday March 12, 2021 @05:03AM (#26433967)

They're using Tornado!

Anyone from Netflix would like to chime in on why it was chosen?

[ Parent | on HN ]

Re:ConsoleMe: A Central Control Plane for AWS Permissions an... by securiy on Friday March 12, 2021 @09:50AM (#26436367)

I considered writing it in Go, but my team is Python-centric. Tornado was chosen back in 2018 because it was one of the better fully featured async web frameworks. The original ConsoleMe was server-side rendered, and Tornado offered support for these types of templates.

ConsoleMe's frontend is now fully React and could be ported away from Tornado, but it'd be a pretty large effort.

[ Parent | on HN ]

Re:ConsoleMe: A Central Control Plane for AWS Permissions an... by jimmyblanco on Friday March 12, 2021 @06:42AM (#26434700)

anyone already using this outside of Netflix?

[ Parent | on HN ]