7 ms·
Show HN: Cloud Nuke-Safely delete AWS resources in 3 clicks
- nthacker 6y agoI launched Cloud Nuke to make it easy to safely delete AWS resources in 3 clicks! I've found that deleting idle & underutilized cloud resources is the quickest win to reduce spending on cloud bills. Additionally the workflow of deleting cloud resources often exist in Engineering teams but it is not well thought out and a single member scrambles to determine what needs to be deleted. Building on clouds is getting easier, and conversely harder to delete since resources often depend on each other.
- robertlagrant 6y agoThe hard bit is checking that all the dependencies you're about to delete are not used anywhere else.
- nthacker 6y agoAgree. This is an early version of that pitch :)
- iKlsR 6y agoI don't think anyone is going to just throw keys in this willy nilly. Perhaps put up some instructions on how to make a one off user with the bare needed access that can be revoked after or something. Still a stretch tho.
- nthacker 6y agoGreat suggestion, thanks!
- SSmiley 6y agoHere is the CLI you can run yourself https://github.com/gruntwork-io/cloud-nuke https://github.com/gruntwork-io/cloud-nuke
- nthacker 6y agoThanks for linking this
- boston_sre87 6y agokind of terrifying.. wonder how long until a script kiddy finds some access/secret keys in github or somewhere else and kills a company.
- cddotdotslash 6y agoIt's definitely already happened [1] (5 years ago at that). It usually involves some kind of ransom as well. [1] https://www.infoworld.com/article/2608076/murder-in-the-amazon-cloud.html https://www.infoworld.com/article/2608076/murder-in-the-amaz...
- arkadiyt 6y agoThey could do the same by using the access keys directly - using this service is strictly better since it would identify the attacker by their Stripe payment method.
- nthacker 6y agoExactly
- boston_sre87 6y agoYea, agreed.. they definitely could assuming someone does something stupid and exposes keys with access to everything. But this removes the barrier of needing to have a tiny bit of technical knowledge to do it. I think pastebin post with the cloudnuke url, keys, and a stolen credit card would look pretty appetizing for bored people. I'm not saying this shouldn't exist exactly.. maybe some kind of additional identity verification would make it less scary tho.
- wrboyce 6y agoThe same pastebin could exist today by simply providing a script alongside the access keys, I don't see how this paid-for service changes anything aside adding an extra hurdle.
- hcazz 6y ago
- sashokbg 6y agoYou have to be completely nuts to put your secret keys in a site on the web.
- nthacker 6y agoFrom the FAQs Q: Do you store the keys? A: No, each Nuke is an ephemeral sandboxed process and we don't store any keys.
- kevsim 6y agoNot sure that's gonna be enough assurance, my friend
- iKlsR 6y agoI thought the same then I thought that maybe they should show instructions to create a user that only has the bare needed access. After you run, you revoke. I could see myself using something akin to this when tearing down old stuff.
- rathel 6y ago> Q: Do you store my card? > A: No payments are proessed directly by Stripe and we don't store your card details "Let's eat grandma".
- nthacker 6y agoI don't follow...?
- hcazz 6y agoThe parent post above is referencing an online meme that pokes fun at a lack of punctuation[0]. In the Q/A section quoted, the lack of punctuation can be read as: > Q: Do you store my card? > A: No payments are processed directly by Stripe, and we don't store your card details Which implies that Stripe is not processing the payments, with the note that the card details are not stored. This could be rewritten as: > Q: Do you store my card? > A: We do not store your credit card information. Payments are processed directly by Stripe, and we don't store your card details. [0] https://i.imgur.com/gbJVPk3.png https://i.imgur.com/gbJVPk3.png
- miked85 6y agoYou would have to be crazy to utilize this tool.
- nthacker 6y agoI do think deleting cloud resources is a valid use case in many Eng teams and directly co-relates to a lower cloud bill. Engineers are frequently building POC's, test machines or just deploying quickly to have idle/underutilized resources lying around
- kevsim 6y agoIt's a few years since I've used AWS, but is deleting stuff that hard? I seem to remember it was a matter of deleting a cloud formation stack and maybe cleaning up a few things that you'd explicitly ask to be preserved (usually storage things like S3 buckets and DBs).
- nthacker 6y agoIt's definitely not point-and-click. My thesis (and experience) is that it has gotten harder Building & Deploying on clouds has gotten easier, and many dev environments have idle, underutilized resources that are paid for.
- dukha 6y agoOpen source CLI to do the same for free without passing AWS keys to third-party: https://github.com/rebuy-de/aws-nuke https://github.com/rebuy-de/aws-nuke
- nthacker 6y agoThanks for linking this
- ezekg 6y agoThe overuse of emojis kill all of your credibility and make you seem like a child playing with my secret keys.
- nthacker 6y agoOk, thanks for that feedback. It's currently disabled while I figure out next steps
- nthacker 6y agoThanks for all the feedback HN, I do agree the service is a risky tool so right now I've stubbed it out, effectively disabling its use while I figure out how to address the comments here