5 ms·
Amazon could leak your secrets stored in Secrets Manager, or KMS. ACM could leak your private keys. EC2 hypervisor could have a 0day that allows China to stea
by cheeze 8y ago
Amazon could leak your secrets stored in Secrets Manager, or KMS.
ACM could leak your private keys.
EC2 hypervisor could have a 0day that allows China to steal all your data.
CloudTrail could drop audit logs.
At some point, you have to trust the company who's software you're using. Sure Amazon could easily drop the last N transactions, but what motivation do they have to do so? What behavior in the past makes you think this wuold happen?
- cloudhead 8y agoCompletely agree - what I'm wondering is why they are telling their customers that they can verify the data for themselves, when that is entirely pointless: "and using cryptography, you can easily verify that there have been no unintended modifications to your application’s data"
- CiPHPerCoder 8y agoMaybe they just want to quell the blockchainia.
- Filligree 8y agoHow is it useless? If the digest you provide is found, then you know the data hasn't been changed. Sure, that's the only bit of information you get, but in a lot of cases that's the only one you need. It doesn't guarantee your data can't be changed, no. What guarantees that is your contact with Amazon.
- cloudhead 8y agoYour other comment puts it nicely - "trust but verify" - I guess it's more about auditing yourself, than Amazon.