3 ms·
Yeah, no. GCP actually allows you to give developers full permissions on their project. This sort of separation doesn't exist on AWS, at least not without makin
by _cenw 3y ago
Yeah, no. GCP actually allows you to give developers full permissions on their project. This sort of separation doesn't exist on AWS, at least not without making it very hard to impossible to share resources. So on AWS, you either have a really good platform team that handles permissions / terraform review / all infra setup (unlikely), a bad or understaffed team doing the same so everyone waits a week or two on specific things being set up (and everyone will hate them for killing their velocity), or you let everyone run wild with way too many permissions so they can actually use the console, hoping they'll stick to best practices (they wouldn't). At least developers doing unsafe things is contained in GCP.
But all that aside, AWS is better. It's much more predictable which things will work together from the documentation, the support is better and the IAM is better on paper, if you actually have that unicorn platform/infrastructure team.
- unethical_ban 3y agoWell, I was on a unicorn team, then. Guardrails on all AWS resources, developers deployed via gitlab/terraform to AWS accounts mapped to departments. You can share resources across AWS accounts. I don't know for easy that is on gcp, but it didn't seem crazy on Amazon.