4 ms·
> Why was it so easy for a lead engineer to get access to a root AWS user without anyone else being notified? Oh my sweet summer child. You haven't worked in l
by bigyellow 5y ago
> Why was it so easy for a lead engineer to get access to a root AWS user without anyone else being notified?
Oh my sweet summer child. You haven't worked in large organizations with thousands of employees before, have you? Surely not if you think this is "Security 101".
- LilBytes 5y agoUp to and including companies of 100,000 staff, to my current employer of < 100. At around ~1,000 staff though you quickly lose "insight" into platform security as it's delegated out to sub-orgs within a larger organisation. Though I've not worked at any FAANG companies where I'd hope security is... erm, of a certain 'maturity'. E.g. Google and BeyondCorp. But I've no desire to rehash leet code exams or get back in that space so likely will never go there :).