News for hackers. Stuff that matters.

A comment on Cleaning Up Dead Bodies in AWS IAM. Parent comment

Re:Cleaning Up Dead Bodies in AWS IAM by scarface_74 on Monday August 28, 2023 @01:55PM (#37297955)
Why did you have users in your AWS account besides a couple of emergency break glass users?

All other users should have been going through some SSO using Microsoft AD, Okta, etc.

[ Parent | on HN ]
Re:Cleaning Up Dead Bodies in AWS IAM by shortrounddev2 on Monday August 28, 2023 @03:09PM (#37298996)
I did not come up with the system
[ Parent | on HN ]
Re:Cleaning Up Dead Bodies in AWS IAM by securiy on Monday August 28, 2023 @07:49PM (#37301780)
IAM users are still needed in large orgs because of legacy tooling that only accepts access key ID / secret access key sigh.
[ Parent | on HN ]