3 ms·
>The only value-add is secret rotation and that's not something that most of the time makes sense to use. This attitude is why company after company keeps leak
by januszeal 9y ago
>The only value-add is secret rotation and that's not something that most of the time makes sense to use.
This attitude is why company after company keeps leaking customer data.
- scrollaway 9y agoThis hasty drawing of conclusions from a post that wasn't suggesting you shouldn't rotate secrets is why populist after populist keeps getting elected.
- Johnny555 9y agoIs it really a "hasty drawing of conclusions" when it's based on a simple reading of what was written? [secret rotation,] that's not something that most of the time makes sense to use.
- scrollaway 9y agoI just had a quick glance at my own app. The majority of the secrets in it are generated outside of AWS and (unless I'm misunderstanding the announcement) can't be rotated by this service without custom logic to rotate them; at which point, as I said in a separate post, I might as well write that custom logic on top of ParameterStore and cron it.