4 ms·
This has been a /major/ sore point for Lambda use, amazing they fixed it, and always great to see they've documented the intense engineering requirements involv
by slovenlyrobot 7y ago
This has been a /major/ sore point for Lambda use, amazing they fixed it, and always great to see they've documented the intense engineering requirements involved to make it happen.
AWS is a beautiful mix of business and technology, it's very rare to see such a large engineering-driven organization managing to balance customer friendliness. I'm an unashamed fanboy
- k__ 7y agoMajor is a bit harsh. As far as I know this was only an issue for legacy architectures.
- scarface74 7y agoNo. Using an RDMS instead of DynamoDB is not a “legacy” architecture. You also shouldn’t expose your database publicly.
- k__ 7y agoRDMS is not legacy, but perimeter security certainly is.
- scarface74 7y agoI’m one of the harshest critics of “lift and shifters” - old school net ops people who get one certificates by watching an ACloudGuru video, duplicate their on prem infrastructure and processes to the cloud and don’t go all in on the advantages of it and end up costing their clients more - but nowhere is it considered “legacy” to not use perimeter security.
- jimmychangas 7y agoHonest question: what, in you opinion, is the state-of-the-art approach? Something like BeyondCorp?
- k__ 7y agoI think zero-trust goes into a good direction. https://www.securityroundtable.org/zero-trust-approach-can-make-cloud-secure/ https://www.securityroundtable.org/zero-trust-approach-can-m...
- slovenlyrobot 7y agoThere is an entire ecosystem of tooling that will shit itself and wake up half the company if you assign a public IP address in the wrong VPC Stuff like this is pain in the ass, it was a major problem
- k__ 7y agohttps://www.securityroundtable.org/security-without-boundaries-perimeter-dead/ https://www.securityroundtable.org/security-without-boundari...