3 ms·
This post reallly rubs me the wrong way. "Do the extra security controls of a custom vpc outweigh the increased risk+complexity of configuring them for this ap
by whalesalad 7y ago
This post reallly rubs me the wrong way.
"Do the extra security controls of a custom vpc outweigh the increased risk+complexity of configuring them for this app?" I do not agree with this attitude of thinking.
For tiny little hobby projects, sure. For something that is production-grade and user-facing I would certainly assemble that inside of a private network.
It's not that hard. If you are building production tech you are likely doing it within the confines of a configuration tool like Terraform anyway -- so do it right.
- time0ut 7y agoI agree we should always strive for defense in depth. However, this only recently became practical for lambda backed we services due to the extreme cold starts a custom VPC introduced. Now that AWS has largely fixed that, I don't know of an argument against it.