4 ms·
Your API credentials are the keys to the kingdom, so you're rightly cautious about giving them out. However, we can proudly say that with nearly one million se
by cloudkick 16y ago
Your API credentials are the keys to the kingdom, so you're rightly cautious about giving them out.
However, we can proudly say that with nearly one million servers having passed through Cloudkick without being inadvertently rebooted, terminated, or otherwise... statistically, it's probably more likely that you'll accidentally terminate it yourself manually than that something untoward will happen to it if you're managing it with us. Our entire business is based on making server management better, easier, and safer for you and we do everything we can to make our service infallible.
In fact, some of the initial inspiration for our dashboard was that existing tools made it too easy to accidentally kill the wrong machines. Some providers give nodes names that aren't exactly user-friendly, and without some basic sorting and labeling tools, eventually almost anyone would make a mistake. So, we added coloring, sorting, and renaming to mitigate that kind of user error.
Also, on the subject of security, we just added the ability to require multi-factor authentication to log in to your Cloudkick account. You can choose to require a YubiKey, one-time SMS code, or one-time email code to access your dashboard. We did a brief write-up on our blog if you're interested in learning more: cloudkick.com/blog
- yannk 16y agoThanks for the answer. I forgot to test one thing before terminating my trial (nice job by the way, the complexity is just a bit overwhelming initially): Is it possible to remove the API key once the initial setup is done as long as the agents are running on the monitored machines?
- cloudkick 16y agoIt is possible, but you'll need to add the "name" option to the agent config in /etc/cloudkick.conf. Here's the documentation: https://support.cloudkick.com/Agent/Cloudkick.conf https://support.cloudkick.com/Agent/Cloudkick.conf