3 ms·
You don't want standing access to this data. That would be a very bad idea. On the other hand, you do need devs to be able to look at real data when it's absol
by munchbunny 8y ago
You don't want standing access to this data. That would be a very bad idea.
On the other hand, you do need devs to be able to look at real data when it's absolutely necessary (generally with a code-enforced gatekeeper and an audit trail). And you need to make sure a dev can SSL into a node for repair/maintenance (again with an audit trail).
That's the argument for using one of the many Identity and Access Management tools/providers out there, including the systems that come baked into the cloud providers.