> Does anyone feels the same while working with this abomination?
Have you tried Boto3? Libraries are supposed to do this, not people.
Does anyone else finds AWS and other Amazon services overly complicated?
111–120 of 148 posts
Re: Does anyone else finds AWS and other Amazon services overly complicated?
#112You HMAC the region so that in case a region is compromised, other regions aren't as well. You HMAC the service so that in case a service is compromised, other services aren't as well, you HMAC the timestamp for obvious reasons (time bound the signature), the outer "aws4_request" HMAC, I'm sure there's a good reason for. Maybe just versioning? Not sure. Also: All of this is handled in the SDKs. Anyone implementing th…
I'm sure there are "reasons" why the HMACs are layered, the question is, does using HMACs actually add useful security properties here, or is this layered HMAC really just a way to generate a cryptographically secure id? If the latter, then can't you just generate that directly rather than needing to gather all of the right information and HMAC it in just the right way?
Re: Does anyone else finds AWS and other Amazon services overly complicated?
#113Earlier quoted context omitted.
I envy you. I am using a simple S3 bucket to serve image files. We’re getting close to busting the free tier web traffic limit. I can’t figure out where, or how, to enter my boss’s credit card so we can start paying for the service. I’m not kidding. I’ve looked everywhere. Several times. I’ve probably spent two hours on this.
Hey, is the AWS account you are using inside an organization? If it's then all the billing information should go into the management account. Hope this is the issue and I could help you.
Exactly this.
Re: Does anyone else finds AWS and other Amazon services overly complicated?
#114Have you ever looked at how X.509 certificate signatures are calculated? It’s wild, but it’s also observably secure. The quadruple HMAC looks… weird, but it seems like something you could just code and test in a few minutes and then forget about.
Re: Does anyone else finds AWS and other Amazon services overly complicated?
#115Earlier quoted context omitted.
Do you know JavaScript?
Nope! Edit: not strictly true. I know JavaScript quite well but I wish to have nothing whatsoever to do with it and the ecosystem around it due to a number of reasons I would have to write a whole essay on.
No post body was provided.
Re: Does anyone else finds AWS and other Amazon services overly complicated?
#116yes
Re: Does anyone else finds AWS and other Amazon services overly complicated?
#117If you don't use the SDK, how can you judge anything as being "overly complicated"? I mean, I don't know about you, but, last time I checked, signatures, certificates, security and all that stuff IS SUPPOSED to be super complicated because it's a subject with a very high inherent complexity in and of itself. The SDK exists and is well designed to precisely shield you from said complexity. If you deliberately choose n…
Have you ever tried to import the AWS SDK into a front end client? It's huge. Last time I tried it, it added multi MB of JS to my SPA, so I could do a relatively "simple" call using it. Yuck.
It did not tree shake cleanly with my build system and I eventually ended up just yanking AWS from the stack entirely.
Re: Does anyone else finds AWS and other Amazon services overly complicated?
#118Earlier quoted context omitted.
I learned cloudformation in a day. Everyone on HN said use terraforms. Tried to learn terraforms and it made things complicated. Went back to CF.
I'm currently in the middle of converting my team to straight CF instead of CDK/Terraform/Serverless. To me it's needlessly complicated, CF is simple, configurable, importantly it's _declarative_, which is the 'correct' way to approach infra (imho, of course). Deploying it? `aws cloudformation package -> aws cloudformation deploy`. That's it. No need for third party tooling or other madness. I think the lack of under…
The thing is, Terraform is the industry standard, for better or for worse. Much like Helm for Kubernetes (or Kubernetes, for that matter). If you go somewhere else, the expectation is probably that you know how to use those.
Re: Does anyone else finds AWS and other Amazon services overly complicated?
#119AWS is an absolute nightmare of complexity. Try out GCP. With minimal experience, you'll find you can actually accomplish things in the cloud console without consulting a single piece of outside documentation! It's wild.
I like this article which echos some of my experience. https://nandovillalba.medium.com/why-i-think-gcp-is-better-t...
Re: Does anyone else finds AWS and other Amazon services overly complicated?
#120Absolutely yes.