4 ms·
One thing I'm not following how this would work with IAM etc. The power of Lambda to me is that it's also easy to deal with authorization to a whole bunch of A
by arianvanp 3y ago
One thing I'm not following how this would work with IAM etc. The power of Lambda to me is that it's also easy to deal with authorization to a whole bunch of AWS services. If I fire off a flame to a worker in a pool and it depends on say accessing DynamoDB, how do I make sure that that unit of work has the right IAM role to do what it needs to do?
Similarly how does authorization/authentication/encryption work between the host and the forked of work? How is this all secured with minimal permissions?
- xavriley 3y ago> how does authorization between the host and the forked work? On fly.io you get a private network between machines so comms are already secure. For machines outside of fly.io it’s technically possible to connect them using something like Tailscale, but that isn’t the happy path. > how do I make sure that the unit of work has the right IAM As shown in the demo, you can customise what gets loaded on boot - I can imagine that you’d use specific creds for services as part of that boot process based on the node’s role.
- moduspol 3y agoI'm interested in following this project, but I'm also quite skeptical of how much is being abstracted here. I still feel like Kubernetes might be the most profitable thing to ever happen to AWS for the same reason--and not because of EKS (their hosted Kubernetes control plane).