4 ms·

Incidentally, Amazon does this. Particularly, they've adopted into the culture the concept of "good intentions don't work, mechanisms do." A decent summary can

Incidentally, Amazon does this. Particularly, they've adopted into the culture the concept of "good intentions don't work, mechanisms do." A decent summary can be found at this link: http://nickfoy.com/blog/2018/4/7/good-intentions-dont-work http://nickfoy.com/blog/2018/4/7/good-intentions-dont-work For example, if an admin bungles a copy/paste shell command and it causes an outage, instead of punishing the admin for not wanting hard enough to do it correctly, they'll change the process so it doesn't rely on admins copy/pasting shell commands.

jmkni 8y ago
That's awesome. I'm guessing it's limited to software Amazon themselves develops and doesn't extend to software deployed to AWS?
- sokoloff 8y ago
  How could it? AWS will happily run whatever code you want, using whatever good or bad development practices you care to choose.
  - jmkni 8y ago
    Fair. More just wondering if that have any sort of process for investigating data breaches involving software hosted on their servers.
    - sk5t 8y ago
      It’s not their software to investigate.
    - jen20 8y ago
      Look at the “shared responsibility model” - if someone got in through the host then I guess they’d investigate. If you leak your SSH private key it’s on you.