Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Launch HN: Slauth.io (YC S22) – IAM Policy Auto-Generation

news.ycombinator.com

Post reply on HN
Print view View original

21–30 of 33 posts

Re: Launch HN: Slauth.io (YC S22) – IAM Policy Auto-Generation

#21

Post by DanielSlauth »

bastawhiz wrote: post #19

> 3 IAM policies per month This is... Not a useful number of policies. I've got a terraform setup for my one person business and I probably have two orders of magnitude more policies than this. Who is this targeted at? Which policies am I supposed to use these three on? What kind of service only has three policies? How am I supposed to evaluate your service with this small number of policies? The problem is that they…

Thank you for the feedback!! We needed something to start of with but your arguments are very fair so we will have to change it. Would you like to sign up for the Beta and give it a try? Would absolutely love your opinionated feedback :D Also, how much would you pay? Could you give us some insights there.

Re: Launch HN: Slauth.io (YC S22) – IAM Policy Auto-Generation

#23

Post by talauslander »

based2 wrote: post #20

https://airiam.io/ https://github.com/JamesWoolfenden/pike

Thanks!

Didn't know about Pike :) Looks interesting, though it is based on a static analysis approach which has its downsides since it might not look the same as the actual activity.

AirIAM was an inspiration for us - it is generally good to group users together and for finding unused policies. We focus on generating an exact policy per identity.

Re: Launch HN: Slauth.io (YC S22) – IAM Policy Auto-Generation

#24

Post by talauslander »

pfoof wrote: post #12

Also a tool that will detect when more permissions are needed will be appreciated. For now it's running `tf apply`, getting 403, searching and reading CloudTrail, changing one permission, goto 1

That's definitely something we are addressing! Would you like to sign up for the beta? Will love getting your feedback and helping you remediate this pain

Re: Launch HN: Slauth.io (YC S22) – IAM Policy Auto-Generation

#29

Post by bastawhiz »

DanielSlauth wrote: post #21
bastawhiz wrote: post #19

> 3 IAM policies per month This is... Not a useful number of policies. I've got a terraform setup for my one person business and I probably have two orders of magnitude more policies than this. Who is this targeted at? Which policies am I supposed to use these three on? What kind of service only has three policies? How am I supposed to evaluate your service with this small number of policies? The problem is that they…

Thank you for the feedback!! We needed something to start of with but your arguments are very fair so we will have to change it. Would you like to sign up for the Beta and give it a try? Would absolutely love your opinionated feedback :D Also, how much would you pay? Could you give us some insights there.

If you dumped out terraform code for policies, I'd probably pay up to $150/mo for some very reasonable number of policies (200?).

Re: Launch HN: Slauth.io (YC S22) – IAM Policy Auto-Generation

#30

Post by distantsounds »

bastawhiz wrote: post #29
DanielSlauth wrote: post #21

Earlier quoted context omitted.

Thank you for the feedback!! We needed something to start of with but your arguments are very fair so we will have to change it. Would you like to sign up for the Beta and give it a try? Would absolutely love your opinionated feedback :D Also, how much would you pay? Could you give us some insights there.

If you dumped out terraform code for policies, I'd probably pay up to $150/mo for some very reasonable number of policies (200?).

https://flosell.github.io/iam-policy-json-to-terraform/

you can do this for free

Post reply on HN