3 ms·
> failed to rotate the AWS root account credentials ... stored in a shared enterprise password manager Unfortunately, many enterprises follow the poor practice
by ttfvjktesd 1y ago
> failed to rotate the AWS root account credentials ... stored in a shared enterprise password manager
Unfortunately, many enterprises follow the poor practice of storing shared credentials in a shared password manager without rotating them when an employee with prior access leaves the company.
- kjs3 1y agoYou might be surprised/horrified at the number of shops I run into that use shared creds without a password manager, still use creds from ex-employees because changing them smells too much like work, and ask "why would I do that?" when you ask about rotation.