Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AWS doesn’t know who I am

ben11kehoe.medium.com

Post reply on HN
Print view View original

21–30 of 123 posts

Re: AWS doesn’t know who I am

#21

Post by YPPH »

andrewnicolalde wrote: post #20
YPPH wrote: post #10

Some of these are legitimate grievances but it seems quite reasonable to have separate accounts for work and play. What I do despise is that my Amazon.com credentials are the same as my Amazon AWS root account credentials. They aren't equals. The services share the name of a rainforest and a very rich CEO but that's about where the similarities end for my part. I'd rather not have to plug in my AWS root account crede…

Is this the case for you? Mine are totally different. How did they get tied together?

Yes, it is. If I try to change my AWS root account password, I get redirected to Amazon.com.

My account is very old. From the sounds of it, my grievance has been addressed by Amazon but I'm grandfathered on the old system.

Re: AWS doesn’t know who I am

#22

Post by waf »

YPPH wrote: post #17
imwillofficial wrote: post #12

Earlier quoted context omitted.

These are two different sets of Creds, or should be.

Hm, well they're the same for me and I get redirected to Amazon.com to edit certain pieces of AWS account information. Perhaps it's because my account is very old - possibly having been created near the inception of AWS. I have no memory of creating the account.

Right, AWS accounts created before September 2017 are coupled to amazon.com retail accounts. Accounts created after this are separate.

Re: AWS doesn’t know who I am

#23

Post by solatic »

YPPH wrote: post #10

Some of these are legitimate grievances but it seems quite reasonable to have separate accounts for work and play. What I do despise is that my Amazon.com credentials are the same as my Amazon AWS root account credentials. They aren't equals. The services share the name of a rainforest and a very rich CEO but that's about where the similarities end for my part. I'd rather not have to plug in my AWS root account crede…

You can change an AWS account's root account's email address. Even if you don't want to set up a new email account just for your AWS root account, many email providers include additional forwarding addresses as a feature, or use something like the Gmail feature where `me+aws-root-account@gmail.com` gets sent to me@gmail.com`; from AWS's perspective these are completely different email addresses even if Gmail treats them as the same Gmail account.

Re: AWS doesn’t know who I am

#24

Post by nikanj »

The downside of One True Identity is getting your startup data deleted from account A because account B was booted from Google for unclear TOS violation.

Usually these issues can only get resolved by getting your blog post to HN

Re: AWS doesn’t know who I am

#25

Post by yarcob »

It's good that every service has separate credentials.

For a counterexample, consider Apple and how they try to restrict you to a single Apple ID. They want everything to be tied to a single person. Every service you use is tied to your Apple ID.

It just doesn't match the way that people use computers.

For example, I get my computer games and business software billed to the same card, and there's no easy way to change that.

Somehow the app store "helpfully" installed a baby monitor app that I use at home on my work computer.

We set up a Mac as build server in the office. It's shared by multiple people. I need to log in with my personal credentials to download software from the Mac App store.

My girlfriend bought an iPad for the kids to watch TV. It's shared by a couple of people. She had to log in with her Apple ID to set it up, and now her personal iMessages and emails are on it. It's stupid.

Some of these problems can be fixed, but it's really annoying.

Re: AWS doesn’t know who I am

#26

Post by anilakar »

zamaterian wrote: post #6

Madness, if you get blocked by aws in one of their accounts. Wave good by to all the other accounts

It's also possible to get your personal GMail account banned after someone at your company breaks Google ToS: https://www.reddit.com/r/tifu/comments/8kvias/tifu_by_gettin...

For the few Google products we use at work, like Calendar, we make sure that people do not register with their existing personal accounts but use their work email address.

Re: AWS doesn’t know who I am

#27

Post by wisty »

yarcob wrote: post #25

It's good that every service has separate credentials. For a counterexample, consider Apple and how they try to restrict you to a single Apple ID. They want everything to be tied to a single person. Every service you use is tied to your Apple ID. It just doesn't match the way that people use computers. For example, I get my computer games and business software billed to the same card, and there's no easy way to chang…

Or see people who "spammed" emotes into a Youtube livestream getting caught by spam detection and locked out of gmail.

Re: AWS doesn’t know who I am

#28

Post by ggm »

Whatever the identity tuple is with Amazon it's deeply confusing. I think it's possible to have:

frobiz@example.com password A frobiz@example.com password B

Work, and be two different accounts. It's scary.

Re: AWS doesn’t know who I am

#29

Post by b112 »

anilakar wrote: post #26
zamaterian wrote: post #6

Madness, if you get blocked by aws in one of their accounts. Wave good by to all the other accounts

It's also possible to get your personal GMail account banned after someone at your company breaks Google ToS: https://www.reddit.com/r/tifu/comments/8kvias/tifu_by_gettin... For the few Google products we use at work, like Calendar, we make sure that people do not register with their existing personal accounts but use their work email address.

Isn't having more than one Gmail account a violation too?

Re: AWS doesn’t know who I am

#30

Post by qxmat »

As an independent software contractor I could say the same about Microsoft's Partner Network.

Unless I sit a myriad of different exams I can't advance my competency to Silver or Gold. This means my MPN default "Partner" benefit is restricted Azure AD Basic and I can't take a parallel Azure DevOps build with me to a new project.

Worst still, if I leave my MS Gold Partner for a start-up I'll lose access to the enterprise elements of Azure AD (SCIM integration, Azure AD Application Proxy etc). If I'm called out to support something I delivered I'll need to absorb the cost of upgrading my Azure AD subscription.

Post reply on HN