Re:AWS Tips I Wish I'd Known Before I Started
by ceejayoz on Monday February 03, 2014 @06:47PM
(#7174425)
I believe the idea is that by preventing SSH the temptation to just pop in and tweak something manually isn't possible.
[ Parent
| on HN ]
Re:AWS Tips I Wish I'd Known Before I Started
by richadams on Tuesday February 04, 2014 @12:11AM
(#7175642)
Yup, this was the intention. You could still allow your automation processes SSH access, just disable it for your users.
The idea is that if a user can't SSH in (at least not without modifying the firewall rules to allow it again), it will force them to try and automate what they were going to do instead. It worked well for me, but it's probably not for everyone.