News for hackers. Stuff that matters.

A comment on Lessons Learned from Twenty Years of Site Reliability Engineering. Parent comment

Re:Lessons Learned from Twenty Years of Site Reliability Eng... by dilyevsky on Friday October 27, 2023 @03:17PM (#38042681)
I don't think zero-trust prohibits network segmentation for redundancy or due to geographical constraints. It's mainly about how you gain access.
[ Parent | on HN ]
Re:Lessons Learned from Twenty Years of Site Reliability Eng... by Moto7451 on Friday October 27, 2023 @03:48PM (#38043061)
Correct. At an old job we did zero trust corp on a different AWS region and account. The admin site was a different zero trust zone in prod region/account and was supposed to eventually become another AWS account in another region (for cost purposes).

I can’t say if any of this was ideal but it did work unobtrusively.

[ Parent | on HN ]