3 ms·
Complete failure of security here. No single credentials should be able to grant that much privileged access.
by boonware 6y ago
Complete failure of security here. No single credentials should be able to grant that much privileged access.
- TwoBit 6y agoAt my last company, signing keys were physically stored in a safe with limited access. No network security breach could possibly get them.
- d1str0 6y agoThis isn't really true. If you have an AWS, you need a global god admin. That's the root user. As an IT guy, I have to store those creds somewhere. So I make the password super long and random, store it in lastpass, add 2fa, and add alerting for all logins. It's never used except in the super rare case we have to do something that requires the megagod level privs of the root account (like changing billing to a master account etc)