3 ms·

Have AWS / employees ever spoken about the stack they run for IAM? Sounds fascinating

• onlyrealcuzzo 5y ago
  400M qps seems mind boggling. What other things exist at this scale?? As people have pointed out, something like Dynamo is likely FAR more complex - but my understanding is that it's also 3-4 orders of magnitude smaller.
  • nicoburns 5y ago
    These are staggering numbers, but my understanding is that IAM roles are wholly contained within the boundaries of an AWS account, so it seems like something that could relatively easily be partitioned horizontally with no shared state required between instances.
    • esotericimpl 5y ago
      Policies can shared across accounts with orgs, in addition arns can be set to allow roles access from other accounts. Boundary is mainly self contained but there can be interactions outside, sometimes significantly. Having said that, under the hood who knows .