4 ms·
Having everything locked down by default on AWS/Azure/GCP would go a long way to improving the security of the internet. Centralisation isn't healthy, but at le
by cameronbrown 7y ago
Having everything locked down by default on AWS/Azure/GCP would go a long way to improving the security of the internet. Centralisation isn't healthy, but at least these companies could make a credible impact on data security by pushing the mentality.
- otterley 7y agoAll AWS APIs are deny-by-default. Only if a pertinent policy (IAM or resource policy) grants access is it allowed. IME, the usual mistake many implementors make is that they inadvertently grant too many privileges and often to the wrong audience.