randomv

4 ms·

1. 1.▲
   by randomv 9y ago

   It uses the GenerateDataKey API against a single master key. At the client side, yes, could send an SNS notification, or otherwise go indirectly via a Lambda. Or, alternatively, stream CloudTrail logs through Lambda to achieve a similar res
2. 2.▲
   by randomv 9y ago

   There's a few different revocation options: * `grant-computer` creates a KMS grant as per http://docs.aws.amazon.com/kms/latest/developerguide/grants.... . `revoke-computer` removes the grant without tou
3. 3.▲
   by randomv 9y ago

   Yeah, that's a pretty big deal. Costs add up quickly on S3 even with Glacier. But I agree, often AWS is better for your lab than a home server, particularly if what you need to test is clustering. Also, Elastic Filestore over a VPN con
4. 4.▲
   Show HN: Encrypt your home-lab server disks using AWS Key Management Service(github.com)

   39 points by randomv 9y ago|27 comments
5. 5.▲
   Show HN: Assume roles in AWS and store access keys in Keychain/libsecret(github.com)

   2 points by randomv 9y ago|0 comments