Re:Show HN: Flashcards to learn AWS skills
by KptMarchewa on Tuesday May 25, 2021 @07:24AM
(#27275491)
>IAM is a rabbit hole, now later VPC restrictions on top
My idea is to build simpler system on top of cloud networking and IAM/permissions.
Why would I want to have networking between components that are permissioned to interact with each other, and the other way, why some app/lambda's service account have permission to interact with particular database, but be blacklisted on firewall? Have GUI on top to drag and drop "routes" between apps.
Of course, make it optional etc, but I think it would save tons of devops time for smaller organisations without audit requirements unlike fintechs, medical stuff etc.
My idea is to build simpler system on top of cloud networking and IAM/permissions.
Why would I want to have networking between components that are permissioned to interact with each other, and the other way, why some app/lambda's service account have permission to interact with particular database, but be blacklisted on firewall? Have GUI on top to drag and drop "routes" between apps.
Of course, make it optional etc, but I think it would save tons of devops time for smaller organisations without audit requirements unlike fintechs, medical stuff etc.