Launch HN: Slauth (YC S22) – auto-generate secure IAM policies for AWS and GCP

Re:Launch HN: Slauth (YC S22) – auto-generate secure IAM pol... by lijok on Monday December 04, 2023 @10:13AM (#38518235)

If you're trying to sell a tool, you don't justify its cost by saying it addresses "huge problems" such as "security". Lets talk material impact; how will this tool pay for itself?

[ Parent | on HN ]

Re:Launch HN: Slauth (YC S22) – auto-generate secure IAM pol... by kkapelon on Monday December 04, 2023 @10:29AM (#38518430)

Sorry, I am not trying to sell anything. I am not OP or parent poster.

If you want to hear about stories of privilege escalation there should be easy to find. I also have some on my own which I might describe in another post but essentially it was the classic - CI/CD pipeline that "thinks" it has access only to QA does a "destroy all servers" in both QA and Production because it also had access to production without knowing anything about it.

[ Parent | on HN ]

Re:Launch HN: Slauth (YC S22) – auto-generate secure IAM pol... by verdverm on Monday December 04, 2023 @10:38AM (#38518572)

Famous HN (reddit) post: https://news.ycombinator.com/item?id=14476421

"Accidentally destroyed production database on first day of a job"

[ Parent | on HN ]

Re:Launch HN: Slauth (YC S22) – auto-generate secure IAM pol... by kkapelon on Monday December 04, 2023 @10:50AM (#38518716)

I also like the "integration tests reaching production" as well https://news.ycombinator.com/item?id=27546017

[ Parent | on HN ]

Re:Launch HN: Slauth (YC S22) – auto-generate secure IAM pol... by verdverm on Monday December 04, 2023 @10:19AM (#38518301)

I think it's supposed to be like insurance. The cost of bad things happening inspires you to pay for things that give you peace of mind. I don't trust LLMs to give me peace of mind for security tasks, if anything, the opposite

[ Parent | on HN ]