2 ms·

Only issue with that aspect is if they still allow configuration (I mean they'd sorta have to) and what if you could exploit a testing configuration to do whate

Only issue with that aspect is if they still allow configuration (I mean they'd sorta have to) and what if you could exploit a testing configuration to do whatever activity you want to hide? You could get the badge from AWS but still do what you wanted. Honestly not sure there is a good solution for that.

michaelmior 9y ago
You could always have a script which strips down things to only necessary configuration values for production and then generates a tarball that could be verified. It seems like it would be possible to get down to a subset of settings that could take on any value while still allowing you to trust the service. Of course, if the settings don't have to be secret, they could also just be baked in as well.