News for hackers. Stuff that matters.

A comment on A Comprehensive Guide to Building a Scalable Web App on AWS. Parent comment

Re:A Comprehensive Guide to Building a Scalable Web App on AWS by withdavidli on Wednesday January 21, 2015 @09:14PM (#8927124)
Here's a story for reference: http://www.devfactor.net/2014/12/30/2375-amazon-mistake/

More about bots scanning github for api keys, that's pretty scary in itself because I know pushing keys by accident happens a lot.

[ Parent | on HN ]
Re:A Comprehensive Guide to Building a Scalable Web App on AWS by juliangregorian on Thursday January 22, 2015 @09:51AM (#8929382)
Yeah, Amazon's key model is a pretty big weak point, both Google Cloud and Azure handle it better. It would be safer to use different sets of keys, like one to create new machines, and app-specific keys that can update only, but that's more work and more headache to manage. Google Cloud just makes me SSH tunnel, which I like.
[ Parent | on HN ]