4 ms·
> Escalation could have been avoided if developers only had the access they absolutely required and did not have root access to all of the servers. I would like
by atsjie 8y ago
> Escalation could have been avoided if developers only had the access they absolutely required and did not have root access to all of the servers. I would like to take a moment to thank whichever developer forwarded their agent to Flywheel.
I'd feel so small if I were this developer right now :-|
A couple of his issues appear to have to do with the use of SSH. An Ops-guy whom I worked with had setup a bastion host with ip whitelisting that automatically shut down after 1 hour. He didn't like it as his credo was "if you're using SSH when using a cloud provider you're probably doing something wrong"; meaning to say you should automate and be able to recreate any infra at all times with logs accessible without the need for SSH. I never forgot that.
- robrtsql 8y agoDid you work with Rich Adams? https://wblinks.com/notes/aws-tips-i-wish-id-known-before-i-started/ https://wblinks.com/notes/aws-tips-i-wish-id-known-before-i-...
- atsjie 8y agono, but I wouldn't be surprised if my colleague got the idea from him. It was around the same time (end of 2014 I think).