3 ms·

Thanks a lot! It certainly has been an issue, lots of requests and suggestions to make entering AWS credentials optional, but as you say, without the right per

Thanks a lot! It certainly has been an issue, lots of requests and suggestions to make entering AWS credentials optional, but as you say, without the right permissions it would be useless. Fortunately, it's the same for all third party tools which rely on APIs, no way around it, so a lot of users are used to having to give them out. I'll share some stats from our small sample size so far: 63% of users who requested an invite then logged in, then of those users 64% entered their credentials, albeit with quite a bit of coaxing and reassurance.

nolok 15y ago
I wouldn't call users being used to give out their full AWS credentials "fortunate". I know that's not exactly what you were trying to see, but still the thought makes me shudder ...
- bdonlan 15y ago
  You can restrict access to an extent with IAM - unfortunately EC2 doesn't have fine-grained resources to apply policies to yet :/
- danoprey 15y ago
  Yes, I agree, but fortunate in the case that it's not as big a problem for us as it could be.
bradgessler 15y ago
You might consider a CloudFormation designer that works up to so many machines (say 15?). That way people could drop the CF file into AWS and build out a cluster. When they realize how awesome it is they could upgrade to the plan thats monitors the cluster (and builds out larger clusters or provisions new ones).
- danoprey 15y ago
  That's a great idea, thank you. We are planning to add import/export to CloudFormation anyway, but what you are suggesting sounds like we wouldn't even have to ask for any credentials (as long as the user isn't using custom AMIs/SnapShots) and could be a good introduction. I will think about this more, thanks a lot!