4 ms·
Aws credentials are short lived precisely so that leaking them has a time limited blast radius. Automatic retrieval, instead of keeping them on disk, is what m
by epistasis 5mo ago
Aws credentials are short lived precisely so that leaking them has a time limited blast radius.
Automatic retrieval, instead of keeping them on disk, is what makes short lived credentials possible.
- Sohcahtoa82 5mo agoI'm not convinced that time-limiting the blast radius matters. It just means that malicious use of the credentials has to be automated, and that's a pretty damn low bar.