Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AWS doesn’t know who I am

ben11kehoe.medium.com

Post reply on HN
Print view View original

51–60 of 123 posts

Re: AWS doesn’t know who I am

#51

Post by Aaargh20318 »

yarcob wrote: post #25

It's good that every service has separate credentials. For a counterexample, consider Apple and how they try to restrict you to a single Apple ID. They want everything to be tied to a single person. Every service you use is tied to your Apple ID. It just doesn't match the way that people use computers. For example, I get my computer games and business software billed to the same card, and there's no easy way to chang…

> My girlfriend bought an iPad for the kids to watch TV. It's shared by a couple of people. She had to log in with her Apple ID to set it up, and now her personal iMessages and emails are on it. It's stupid.

Apple considers iPads (and iPhones/Macs) as personal devices. You aren't expected to share an iPad, you're expected to buy an iPad for each user.

Re: AWS doesn’t know who I am

#52

Post by justincormack »

ggm wrote: post #28

Whatever the identity tuple is with Amazon it's deeply confusing. I think it's possible to have: frobiz@example.com password A frobiz@example.com password B Work, and be two different accounts. It's scary.

They dont work very well, I had two Amazon accounts and changed them to the same email, but I could only log in to one of them. It is very confusing.

Re: AWS doesn’t know who I am

#53

Post by mabbo »

YPPH wrote: post #10

Some of these are legitimate grievances but it seems quite reasonable to have separate accounts for work and play. What I do despise is that my Amazon.com credentials are the same as my Amazon AWS root account credentials. They aren't equals. The services share the name of a rainforest and a very rich CEO but that's about where the similarities end for my part. I'd rather not have to plug in my AWS root account crede…

Without going into too much detail, this "coupled account" problem is taken very seriously internally (AWS Identity dev, my opinions are my own and I don't speak for the company).

There is a very large project to fix this. But as you can probably imagine, with a system this large and complex making changes to fundamentals like identities is hard, and done with a lot of care.

All new accounts created today are "decoupled". They are not your Amazon account, and (barring some special internal tools for testing) you cannot make them the same account. But migrating all the existing accounts without causing harm is a messy business.

My own AWS account has the same problem.

Re: AWS doesn’t know who I am

#54

Post by dukeyukey »

Aaargh20318 wrote: post #51
yarcob wrote: post #25

It's good that every service has separate credentials. For a counterexample, consider Apple and how they try to restrict you to a single Apple ID. They want everything to be tied to a single person. Every service you use is tied to your Apple ID. It just doesn't match the way that people use computers. For example, I get my computer games and business software billed to the same card, and there's no easy way to chang…

> My girlfriend bought an iPad for the kids to watch TV. It's shared by a couple of people. She had to log in with her Apple ID to set it up, and now her personal iMessages and emails are on it. It's stupid. Apple considers iPads (and iPhones/Macs) as personal devices. You aren't expected to share an iPad, you're expected to buy an iPad for each user.

Then Apple is either wrong, or being actively malicious with its products in order to sell more of them.

Re: AWS doesn’t know who I am

#55

Post by Monory »

Aaargh20318 wrote: post #51
yarcob wrote: post #25

It's good that every service has separate credentials. For a counterexample, consider Apple and how they try to restrict you to a single Apple ID. They want everything to be tied to a single person. Every service you use is tied to your Apple ID. It just doesn't match the way that people use computers. For example, I get my computer games and business software billed to the same card, and there's no easy way to chang…

> My girlfriend bought an iPad for the kids to watch TV. It's shared by a couple of people. She had to log in with her Apple ID to set it up, and now her personal iMessages and emails are on it. It's stupid. Apple considers iPads (and iPhones/Macs) as personal devices. You aren't expected to share an iPad, you're expected to buy an iPad for each user.

Macs are definitely not personal — you can trivially set up multiple user accounts.

Re: AWS doesn’t know who I am

#56

Post by Spivak »

dukeyukey wrote: post #54
Aaargh20318 wrote: post #51

Earlier quoted context omitted.

> My girlfriend bought an iPad for the kids to watch TV. It's shared by a couple of people. She had to log in with her Apple ID to set it up, and now her personal iMessages and emails are on it. It's stupid. Apple considers iPads (and iPhones/Macs) as personal devices. You aren't expected to share an iPad, you're expected to buy an iPad for each user.

Then Apple is either wrong, or being actively malicious with its products in order to sell more of them.

I mean it’s not really malicious to design a single-user system. At best it’s passively malicious. Sure, you can always share your personal pizza but you have to deal with the consequences that it was sized for one person and you both might be hungry after.

Are you upset about the fact that you can’t have multiple isolated user-accounts on an iPhone?

Re: AWS doesn’t know who I am

#58

Post by elzbardico »

Aaargh20318 wrote: post #51
yarcob wrote: post #25

It's good that every service has separate credentials. For a counterexample, consider Apple and how they try to restrict you to a single Apple ID. They want everything to be tied to a single person. Every service you use is tied to your Apple ID. It just doesn't match the way that people use computers. For example, I get my computer games and business software billed to the same card, and there's no easy way to chang…

> My girlfriend bought an iPad for the kids to watch TV. It's shared by a couple of people. She had to log in with her Apple ID to set it up, and now her personal iMessages and emails are on it. It's stupid. Apple considers iPads (and iPhones/Macs) as personal devices. You aren't expected to share an iPad, you're expected to buy an iPad for each user.

Create a kid's account in a family, set up the device using this apple id. that's the correct way of setting up kid's devices anyway.

Re: AWS doesn’t know who I am

#59

Post by ctvo »

Spivak wrote: post #56
dukeyukey wrote: post #54

Earlier quoted context omitted.

Then Apple is either wrong, or being actively malicious with its products in order to sell more of them.

I mean it’s not really malicious to design a single-user system. At best it’s passively malicious. Sure, you can always share your personal pizza but you have to deal with the consequences that it was sized for one person and you both might be hungry after. Are you upset about the fact that you can’t have multiple isolated user-accounts on an iPhone?

> Are you upset about the fact that you can’t have multiple isolated user-accounts on an iPhone?

The iPhone was mentioned once, to connect it’s not possible on either iPhone or iPad. This is about the iPad, a completely different class of device, where it makes sense it would be shared, at least within a family, and has nothing to do with personal pizzas.

It'a small point here, but the way you moved the goal post so your analogy applied more really bothered me.

Re: AWS doesn’t know who I am

#60

Post by LilBytes »

solatic wrote: post #23
YPPH wrote: post #10

Some of these are legitimate grievances but it seems quite reasonable to have separate accounts for work and play. What I do despise is that my Amazon.com credentials are the same as my Amazon AWS root account credentials. They aren't equals. The services share the name of a rainforest and a very rich CEO but that's about where the similarities end for my part. I'd rather not have to plug in my AWS root account crede…

You can change an AWS account's root account's email address. Even if you don't want to set up a new email account just for your AWS root account, many email providers include additional forwarding addresses as a feature, or use something like the Gmail feature where `me+aws-root-account@gmail.com` gets sent to me@gmail.com`; from AWS's perspective these are completely different email addresses even if Gmail treats t…

I'm using the same method. But only went down this like the grandfather comment where I'd already been bitten by having the same email as amazon@domain.com for both AWS and Amazon. Fortunately creating aliases in Fastmail is very trivial.
Post reply on HN