3 ms·
The only threat in the room that makes sense is the rogue, disgruntled amazon employee. One might hypothesize government auditors and warrants compelling raw d
by twimbley 8y ago
The only threat in the room that makes sense is the rogue, disgruntled amazon employee.
One might hypothesize government auditors and warrants compelling raw disk contents to be turned over for criminal prosecution, but that scenario supposes that a government entity would lack the creativity to imagine options like arresting the root login user, and jailing them until they enter the root account password to offer access to the encrypted data at rest.
- kefabean 8y agoTrue and even this assumes a specific limited threat vector: eg. employee has access to storage volume but not encryption key, employee does not have ability to dump guest memory, employee has no backdoor mechanism to elevate permissions within account. We have no cast iron guarantees (other than trust) that these limiting controls are in place.
- jiveturkey 8y agoSure, but those things require “lots” of access. Just grabbing a disk or decommissioning half of an HA pair etc requires only “little” access. Just because there are complex vectors doesn’t mean you give up on the basic ones. This is a valuable thing, and for now, a differentiator.