2 ms·
I used to work in cloud security, mostly AWS but got to hear about experiences with GCP. AWS IAM is much better than GCP, or was 3 years ago. If you are in an
by unethical_ban 3y ago
I used to work in cloud security, mostly AWS but got to hear about experiences with GCP.
AWS IAM is much better than GCP, or was 3 years ago. If you are in an industry where fine-tuned RBAC per service is a thing you want, it's better to go AWS, all things equal.
Also, GCP reps suck compared to AWS in terms of responsiveness and general give-a-shits. Hearsay.
- _cenw 3y agoYeah, no. GCP actually allows you to give developers full permissions on their project. This sort of separation doesn't exist on AWS, at least not without making it very hard to impossible to share resources. So on AWS, you either have a really good platform team that handles permissions / terraform review / all infra setup (unlikely), a bad or understaffed team doing the same so everyone waits a week or two on specific things being set up (and everyone will hate them for killing their velocity), or you let everyone run wild with way too many permissions so they can actually use the console, hoping they'll stick to best practices (they wouldn't). At least developers doing unsafe things is contained in GCP. But all that aside, AWS is better. It's much more predictable which things will work together from the documentation, the support is better and the IAM is better on paper, if you actually have that unicorn platform/infrastructure team.
- unethical_ban 3y agoWell, I was on a unicorn team, then. Guardrails on all AWS resources, developers deployed via gitlab/terraform to AWS accounts mapped to departments. You can share resources across AWS accounts. I don't know for easy that is on gcp, but it didn't seem crazy on Amazon.