3 ms·

Hey, just a heads up, you posted your AWS secret key. I'd take that down and change your key ASAP. I had my keys compromised before and someone racked up a $5k

Hey, just a heads up, you posted your AWS secret key. I'd take that down and change your key ASAP. I had my keys compromised before and someone racked up a $5k AWS bill mining bit coins.

netcraft 11y ago
he mentions in the article he created that account specifically to only have the ability to call that one lambda function - which I didnt realize you could restrict to that level.
- idunno246 11y ago
  I like this one better because it demos using google auth to get temporary aws credentials: https://github.com/cloudnative/lambda-chat https://github.com/cloudnative/lambda-chat
  - mayli 11y ago
    Last message is "Peter Sankauskas Hello". I tried to send some message, and it's saying "Message sent to SNS successfully". But these message never show up in the page.
    - pas256 11y ago
      I'll be talking about this at Gluecon this week. You are right, it is a little broken right now.
detaro 11y ago
> One thing you might note is that we’re exposing our AWS public and secret keys. This is actually not that big of a deal. To make this secure, we actually created a new AWS User and with a Policy specifically preventing everything except the one Lambda Function: