News for hackers. Stuff that matters.

A comment on Awsviz.dev simplifying AWS IAM policies. Parent comment

Re:Awsviz.dev simplifying AWS IAM policies by egorfine on Wednesday July 10, 2024 @12:52PM (#40928853)
What is better? I am pretty sure IAM is the best there is, no questions about that.

Better for small teams? Sure: a login/password system with maybe optional restrictions on services and maybe "readonly" access and maybe with disabled aws console.

Basically, something that was in AWS before the IAM madness came in.

[ Parent | on HN ]
Re:Awsviz.dev simplifying AWS IAM policies by JackSlateur on Wednesday July 10, 2024 @03:05PM (#40930266)
But you can do that with IAM, and quite easily too

Create IAM user with access/secret keys are easy

Assign the built-in ReadOnly policy, easy too, or any other built-in "generic" policy

[ Parent | on HN ]
Re:Awsviz.dev simplifying AWS IAM policies by egorfine on Thursday July 11, 2024 @05:35AM (#40934947)
You are missing my point.

Of course, it is possible with IAM because IAM is a top-tier ACL system.

The point: I don't want to learn it.

[ Parent | on HN ]