Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

An AWS account just for getting into other AWS accounts

src-bin.com

Post reply on HN
Print view View original

61–70 of 109 posts

Re: An AWS account just for getting into other AWS accounts

#61

Post by Akronymus »

hatware wrote: post #56
JimDabell wrote: post #52

Earlier quoted context omitted.

There aren‘t any DMs on Hacker News, and if he didn’t post that comment I would have thought it was a disinterested commenter recommending something they had used, not somebody who works on the project. The cultural norm here is to disclose when you are recommending your own product and it’s not childish to point out when people fail to do that, it’s reinforcing that cultural norm.

> There aren‘t any DMs on Hacker News Good thing they... (checks notes) ...know exactly who made the post and can reach out to them on LinkedIn or email them. Cultural norms are reinforced by good examples, there's nothing good about snippy public comments. Reaching out to them privately isn't hard, and, dare I say it: is more inclusive. I don't think I need to explain the origin of the word assume.

> , there's nothing good about snippy public comments.

It didn't seem snippy to me. "Why aren't you disclosing your ties" would be IMO. The message that was actually posted seemed quite diplomatic.

Re: An AWS account just for getting into other AWS accounts

#62

Post by harha_ »

suzzer99 wrote: post #60
throwawaaarrgh wrote: post #41

Earlier quoted context omitted.

CloudHealth. 1500 AWS accounts, it does the job well enough

"1500 AWS accounts" You just blew my mind. We have two accounts and it gets messy sometimes.

Messy? Isn't one of the points of having multiple accounts to reduce mess?

Re: An AWS account just for getting into other AWS accounts

#64

Post by dmak »

TYPE_FASTER wrote: post #31
dmak wrote: post #14

Earlier quoted context omitted.

I looked at the landing page, but don't really understand when I would use this. Could you give a few examples of why this is useful?

Centralized management and application of IAM policy with the goal of giving teams the freedom to manage their own account, including account security, while still protecting the organization as a whole. When customers request single tenancy in the cloud, where single tenancy is referring to an AWS account, being able to automate account management will be important when trying to scale.

Thanks!

Re: An AWS account just for getting into other AWS accounts

#65

Post by raffraffraff »

throwawaaarrgh wrote: post #40

For an IdP it seems like Dex combined with an LDAP server would be the simplest and most flexible solution. For reliability, I'm curious about throwing together a really simple LDAP server that stores records in AWS S3. That way your IdP can be trivially replicated with as much reliability as you want and nearly no maintenance. (Dex's storage can be Etcd, but I would also look to implement S3 storage)

> a really simple LDAP server that stores records in AWS S3

... Like glauth? https://github.com/glauth/glauth

Re: An AWS account just for getting into other AWS accounts

#66

Post by JimDabell »

hatware wrote: post #56
JimDabell wrote: post #52

Earlier quoted context omitted.

There aren‘t any DMs on Hacker News, and if he didn’t post that comment I would have thought it was a disinterested commenter recommending something they had used, not somebody who works on the project. The cultural norm here is to disclose when you are recommending your own product and it’s not childish to point out when people fail to do that, it’s reinforcing that cultural norm.

> There aren‘t any DMs on Hacker News Good thing they... (checks notes) ...know exactly who made the post and can reach out to them on LinkedIn or email them. Cultural norms are reinforced by good examples, there's nothing good about snippy public comments. Reaching out to them privately isn't hard, and, dare I say it: is more inclusive. I don't think I need to explain the origin of the word assume.

> Good thing they... (checks notes) ...know exactly who made the post and can reach out to them on LinkedIn or email them.

Which I wouldn’t see. I’m glad they posted the comment.

Re: An AWS account just for getting into other AWS accounts

#67

Post by raffraffraff »

datalopers wrote: post #34
scarface74 wrote: post #8

> If you wish to provide access via SSH… Don’t do this. I can’t think of a single reason that anyone ever needs to SSH directly into a server on AWS in 2022. Use System Manager Session Manager https://docs.aws.amazon.com/systems-manager/latest/userguide... Short explanation: it allows you to access a Linux instance via SSH using SSM as an IAM controlled proxy or use RDP for Windows. You don’t need ingress access to y…

A lot of us are busy solving business needs in smaller companies/startups and don't have the time nor expertise to learn every single AWS service and come up with a justification for utilizing it.

I understand your frustrations with AWS, and I get that solutions for enterprises don't always work for smaller companies, but when someone describes a solution that reduces operational complexity while increasing security, they should get thanks. It's not their fault that AWS has too many services.

Re: An AWS account just for getting into other AWS accounts

#68

Post by raffraffraff »

scarface74 wrote: post #49
datalopers wrote: post #34

Earlier quoted context omitted.

A lot of us are busy solving business needs in smaller companies/startups and don't have the time nor expertise to learn every single AWS service and come up with a justification for utilizing it.

Control Tower is literally a click once and it sets everything up for you.

This is an example of why the basic AWS Cloud Architect Associate exam is a good idea. It's how I learned about ControlTower (after using AWS for years)

Re: An AWS account just for getting into other AWS accounts

#69

Post by pantulis »

harha_ wrote: post #62
suzzer99 wrote: post #60

Earlier quoted context omitted.

"1500 AWS accounts" You just blew my mind. We have two accounts and it gets messy sometimes.

Messy? Isn't one of the points of having multiple accounts to reduce mess?

I would say that once you get beyond those additional two-three accounts, you have tackled the mess and scaling to 1500 gets easier. And yes it's mind blowing.

Re: An AWS account just for getting into other AWS accounts

#70

Post by fazfq »

smcleod wrote: post #59
rcrowley wrote: post #3

Earlier quoted context omitted.

In the meantime, check out Substrate https://src-bin.com/substrate/ > and don’t worry about waiting for AWS to improve.

Far out - that website looks dodgy as. What on earth is going on with its fonts - it looks like a newspaper vomited onto the screen.

It looks completely normal to me?
Post reply on HN