News for hackers. Stuff that matters.

A comment on Critical Vulnerability: AWS Credential Disclosure. Parent comment

Re:Critical Vulnerability: AWS Credential Disclosure by systemizer on Monday April 07, 2014 @03:51PM (#7548945)
Cool. I'm curious: what was your motivation for doing this rather than using Chef's encrypted data bags?

Is it because it's tightly integrated with IAM? If that's the case, does that mean you guys use a cookbook that tightly couples system users with IAM roles?

[ Parent | on HN ]
Re:Critical Vulnerability: AWS Credential Disclosure by mahmoudimus on Monday April 07, 2014 @04:34PM (#7549289)
We're strong believers that data bags are an anti-pattern. One of our engineers, https://github.com/coderanger, wrote something up: https://coderanger.net/2014/02/data-bags/

He was employed previously at Opscode, now Chef Inc.

[ Parent | on HN ]