Viewing profile — jon918

Great point on doing things through PRs not clickops. As your practices mature, the need for approvals can shift from the care and feeding of your infrastructure to managing risk. …

Thanks so much for the feedback! > I was thinking of launching an access management project myself. Most access management systems are focused around SSO, and this - due to the SSO…

Thanks - we’ve definitely seen Sym help our early customers safely distribute access decisions. Because the flows are managed in code, teams also get visibility into how these rule…

Hey I’m Adam’s co-founder, we’d love feedback from the HN community on what we’ve been working on!

Author here, I went out on a limb and framed an argument for better approaches to cloud access management using the structure of the paper where Alan Turing introduced the Turing T…

Itching for the follow up on how how to use organization-based conditions to make things simpler.

This is cool, I like the practicality and flexibility of being able to work with the data in Google Sheets without having to do any manual syncing.

I wrote a follow up post to this on SSH tunneling: https://news.ycombinator.com/item?id=22665037

This is a follow up to last week's post on session manager, a bunch of people had questions on SSH tunneling. Last week's post: https://news.ycombinator.com/item?id=22592875

Good call to watch out for this stuff. The examples in the repo we set up use the AmazonSSMManagedInstanceCore managed policy, which does not grant any S3 permissions, just various…

You can do this but it depends on your setup as to how. If you have AWS IAM users (not federated), then you can use MFA conditions in your policies as documented here: https://docs…

Yeah, this is the same deal. Session Manager will log your sessions which is pretty cool.

It does work with hardware tokens, IF you get your AWS IAM credentials using a hardware token. If you're using AWS IAM users then here are instructions: https://docs.aws.amazon.com…

Cool, will do!

I'd love to learn how you're using Session Manager or what other features/integrations you'd like to see us explore. Also if the terraform module packaging is useful. There are add…

This is an example we've been working that creates an Okta-managed user who can get in to a tagged EC2 instance using Session Manager. No bastion/sshd/security group ingress rules …