3 ms·

I really don't know what must happen before I give AWS CRUD credentials to a third party. However, that something didn't happen by reading this website and its

I really don't know what must happen before I give AWS CRUD credentials to a third party. However, that something didn't happen by reading this website and its value proposition. I'm saying this as, hopefully, source for inspiration. The amount of trust a third party must inspire before anyone (like me at least?) dares to delegate operation must be overwhelming.

igorzij 5y ago
Thanks! This is super helpful What'd be your thoughts on the following options: - IAM role account-to-account (no credentials sharing) - Self-hosted webapp that runs in your account - Mac app so that creds never ever leave your laptop
- redhale 5y ago
  Make that a Wndows-compatible app and I'm sold.
- pachico 5y ago
  > - Self-hosted webapp that runs in your account this is probably as close as I'd get to use it, yes, with a little console that displays all the communications as a prove of good faith, welcoming anyone to spoof network and find out there are no home-calls/telemetry involved.
rirze 5y ago
Agreed, I'm not a fan of AWS's online console and its UI/UX, but my distaste isn't enough to login to AWS through another site. I'd rather navigate by CLI/API before I do that. Furthermore, I'm not really a fan of these closed-source available-for-pricing, enhancement products. They last for a few months in pre-release form, gauge that they don't have the customer numbers to justify their revenue, and then cease development.
- doyoung 5y ago
  Totally agreed. Still kudos to the Lemon team in trying to improve the overall AWS experience.
- igorzij 5y ago
  Thanks! I couldn't agree with your second point though. You're basically dismissing the entire category of paid-for SaaS developer tools - some of which are clearly very successful. CircleCI, Datadog, Doppler to name a few. Ignoring all of them and only using open source is a very understandable personal choice, but saying that their entire model is broken seems to be a bit of an overstatement.

igorzij 5y ago

Thanks! This is super helpful What'd be your thoughts on the following options: - IAM role account-to-account (no credentials sharing) - Self-hosted webapp that runs in your account - Mac app so that creds never ever leave your laptop

redhale 5y ago
Make that a Wndows-compatible app and I'm sold.
pachico 5y ago
> - Self-hosted webapp that runs in your account this is probably as close as I'd get to use it, yes, with a little console that displays all the communications as a prove of good faith, welcoming anyone to spoof network and find out there are no home-calls/telemetry involved.

rirze 5y ago

Agreed, I'm not a fan of AWS's online console and its UI/UX, but my distaste isn't enough to login to AWS through another site. I'd rather navigate by CLI/API before I do that. Furthermore, I'm not really a fan of these closed-source available-for-pricing, enhancement products. They last for a few months in pre-release form, gauge that they don't have the customer numbers to justify their revenue, and then cease development.

doyoung 5y ago
Totally agreed. Still kudos to the Lemon team in trying to improve the overall AWS experience.
igorzij 5y ago
Thanks! I couldn't agree with your second point though. You're basically dismissing the entire category of paid-for SaaS developer tools - some of which are clearly very successful. CircleCI, Datadog, Doppler to name a few. Ignoring all of them and only using open source is a very understandable personal choice, but saying that their entire model is broken seems to be a bit of an overstatement.