2 ms·
There is no doubt that IAM is the best thing to happen to Amazon AWS in a long time. The ability to have read-only and more importantly write-only access to SQS
by taligent 14y ago
There is no doubt that IAM is the best thing to happen to Amazon AWS in a long time. The ability to have read-only and more importantly write-only access to SQS/S3/SimpleDB is brilliant. What is still needed though is a way to securely manage the keys/certificates on the actual server. Maybe Amazon could build a key store that only unlocks from certain processes at certain times and logs access attempts.
- flyt 14y agoReal logging of IAM access and key/role usage would be much appreciated for auditing. Tough now to figure out who is doing what, from where, and with what permissions. Restricting AWS API access from sources outside the AWS network would also be pretty useful.
- rdl 14y agoIt would be interesting to talk with you about what you actually want from the on-instance key store...