Dear AWS, please let me be a cloud engineer again

Re:Dear AWS, please let me be a cloud engineer again by Aeolun on Saturday July 13, 2024 @08:49PM (#40958049)

I’d be interested in knowing why it takes +/- 10 seconds after I create/update a role before I can actually use it.

[ Parent | on HN ]

Re:Dear AWS, please let me be a cloud engineer again by blitzar on Sunday July 14, 2024 @04:09AM (#40959605)

If you have navigated far enough to create/update a role you are already aware of the bloat and mess that ties all their services together.

[ Parent | on HN ]

Re:Dear AWS, please let me be a cloud engineer again by sylens on Sunday July 14, 2024 @07:06AM (#40960196)

IAM is eventually consistent. And they do a lot of derivations of hashing off an original signature and distributing individual, bespoke versions to services in different regions to limit the blast radius of a compromised credential.

If you go to an AWS event in the future, the name of the chalk talk was "The Life of an IAM Policy"

[ Parent | on HN ]