4 ms·
Well given that you can manage services across all regions from a single web interface, I assume someone compromising this web interface would be able to contro
by Rjevski 9y ago
Well given that you can manage services across all regions from a single web interface, I assume someone compromising this web interface would be able to control and bring stuff down across all regions.
- jrimbault 9y agoDo you think there's a global world admin web console ?
- Rjevski 9y agoWell as a customer how do you interact with it? Do you have one admin interface per region with its own URL or do you just go on an AWS homepage, login and control everything from there?
- TrickyRick 9y ago> Do you have one admin interface per region This ^^^ When I go to login, it redirects me to: https://us-east-1.signin.aws.amazon.com https://us-east-1.signin.aws.amazon.com And for example the S3 console is on the URL https://console.aws.amazon.com/s3/home?region=us-east-1 https://console.aws.amazon.com/s3/home?region=us-east-1 Of course this doesn't mean I can't easily switch to a different region, or for that matter control all my regions from a single interface, but there is some distinction.
- plandis 9y agoSeparate end points. Also, AWS recommends that you might want multiple different accounts for more isolation [1] [1] https://aws.amazon.com/answers/account-management/aws-multi-account-security-strategy/ https://aws.amazon.com/answers/account-management/aws-multi-...
- jrimbault 9y agoI meant like truly admin, amazon intranet admin.