2 ms·
As someone tasked with protecting infrastructure, devs not being able to SSH into production is a godsend.
by staticassertion 8y ago
As someone tasked with protecting infrastructure, devs not being able to SSH into production is a godsend.
- scaryclam 8y agoThere's a difference from devs not being able to ssh in due to access restrictions and devs not being able to ssh in because it's not a feature of the service. I actually agree that not having unilateral access to the production system is a good thing. But not being able to have anyone able to be granted access, even for a limited time, is neither productive or safe.
- hackerpacker 8y agoso, what is to stop them from running code from the app?!? Who do you call when something breaks? Do you expect the dev to not be able to log in and investigate at 3am or whenever? I mean if you can't trust your dev team, or the procedures surrounding them, you are kinda screwed.
- staticassertion 8y agoTo be clear, the issue isn't about trusting developers in prod. It's about limiting access to prod as an avenue for attackers who will be looking to get in there and exfil sensitive data. Nothing to do with trust of devs.