Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Vantage – An alternative AWS console focused on developer experience

vantage.sh

Post reply on HN
Print view View original

21–30 of 88 posts

Re: Show HN: Vantage – An alternative AWS console focused on developer experience

#21

Post by dastbe »

StratusBen wrote: post #17
raylad wrote: post #15

Earlier quoted context omitted.

How does it handle credentials? What's the potential for Vantage being hacked and the hackers gaining admin access to your users' AWS accounts?

The provided CloudFormation stack creates a Cross Account IAM Role with a list of read only permissions. We don't accept access keys or secrets. - A permissions overview is here (most aren't used for now). This list was made from the AWS-managed IAM policy of "ReadOnlyAccess" but whittled down to remove things like our ability to read from S3 Buckets or Databases: https://docs.vantage.sh/permissions/ - The latest Clo…

for what its worth, there is a much better scoped ViewOnlyAccess managed policy that makes a much better distinction about what is reasonable read-only access (ecs:listClusters) and not reasonable read-only access (dynamodb:Query)

Re: Show HN: Vantage – An alternative AWS console focused on developer experience

#23

Post by StratusBen »

dastbe wrote: post #21
StratusBen wrote: post #17

Earlier quoted context omitted.

The provided CloudFormation stack creates a Cross Account IAM Role with a list of read only permissions. We don't accept access keys or secrets. - A permissions overview is here (most aren't used for now). This list was made from the AWS-managed IAM policy of "ReadOnlyAccess" but whittled down to remove things like our ability to read from S3 Buckets or Databases: https://docs.vantage.sh/permissions/ - The latest Clo…

for what its worth, there is a much better scoped ViewOnlyAccess managed policy that makes a much better distinction about what is reasonable read-only access (ecs:listClusters) and not reasonable read-only access (dynamodb:Query)

That's good feedback. Customers can also give us a Cross Account IAM role with whatever permissions they'd like and Vantage should work accordingly in a gracefully degraded fashion.

For example: If you only want to give us access to EC2, things should theoretically work.

To use a custom cross account IAM role all you need to do is email support@vantage.sh and we can help out with some other configuration details to get it going.

Re: Show HN: Vantage – An alternative AWS console focused on developer experience

#25

Post by StratusBen »

jensenbox wrote: post #19

I think there needs to be better pricing. I know pricing is hard but there should at least be a call to action if you have much a much bigger spend than what is on the pricing page.

This was a miss for me personally. We added a few more Q&A around this but aren't pushing any changes to the site until after launch now.

The answer is essentially we have custom plans available and you just need to contact support@vantage.sh - we just want to understand your scale and use case. In some cases we aren't the right fit right now. For example, we spoke to a company with ~$20M in monthly AWS costs and told them we need to get back to them before we can realistically support them.

We'll hopefully have this updated tomorrow. Thanks for this call-out.

Re: Show HN: Vantage – An alternative AWS console focused on developer experience

#26

Post by StratusBen »

bberenberg wrote: post #24

Am I understanding correctly that if I have over 500 a month in spend there is no free trial option? Also FYI the email verification hit my spam box on Gmail. Edit: Also is there any way to have multiple users on a Vantage account?

If you have over $500 per month of AWS spend, you are still free to use the product (no credit card required to get started) and everything will work but certain features will be restricted.

For example, cost transparency reports will require an upgrade to use for spend over $500 per month. The specifics are detailed on our pricing page here: https://vantage.sh/pricing

We are taking a look at what it would take to offer a free trial on our end in the future as well.

Re: Show HN: Vantage – An alternative AWS console focused on developer experience

#27

Post by neom »

yevpats wrote: post #9

Looks good, congrats! Open source alternative https://github.com/cloudquery/cloudquery

This is awesome. Putting yet another tool you don't have control over in your toolchain seems to be causing headaches for a lot of developers with big applications these days. Relying on other peoples services is always a risk, great to see there are OSS alternatives.
Post reply on HN