Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

An AWS account just for getting into other AWS accounts

src-bin.com

Post reply on HN
Print view View original

81–90 of 109 posts

Re: An AWS account just for getting into other AWS accounts

#81

Post by singlow »

tedk-42 wrote: post #73

These type of articles make me wanna quit doing anything in IT. It's not a criticism of the author, more the current state of technology in AWS. I'd really like to have just 1 AWS account where I can see and do everything there and not keep switching and think about account IDs or which account has what S3 bucket/server whatever.

Then do it. Why does your activity in IT depend on what someone on the internet says? For the rest of us, multi-account setups offer a large number of advantages that outweigh the inconveniences and we have built tooling to deal with most of those anyway.

Re: An AWS account just for getting into other AWS accounts

#82

Post by x86_64Ubuntu »

smcleod wrote: post #59
rcrowley wrote: post #3

Earlier quoted context omitted.

In the meantime, check out Substrate https://src-bin.com/substrate/ > and don’t worry about waiting for AWS to improve.

Far out - that website looks dodgy as. What on earth is going on with its fonts - it looks like a newspaper vomited onto the screen.

It looks like it's a super un-Javascripted website. It's only about 2.8MB to load when looking in Chrome Developer view.

Re: An AWS account just for getting into other AWS accounts

#83

Post by rcrowley »

smcleod wrote: post #59
rcrowley wrote: post #3

Earlier quoted context omitted.

In the meantime, check out Substrate https://src-bin.com/substrate/ > and don’t worry about waiting for AWS to improve.

Far out - that website looks dodgy as. What on earth is going on with its fonts - it looks like a newspaper vomited onto the screen.

It’s set in Computer Modern, the font Donald Knuth designed for TeX and which you most often encounter in academic papers.

Re: An AWS account just for getting into other AWS accounts

#84

Post by [deleted] »

Hikikomori wrote: post #72
diceduckmonk wrote: post #37

What tool do people here use to search across AWS accounts? Disclaimer: we are building a search engine to search for resources across “workspaces”. In AWS, this unit is the Account. In GCP, this unit is the Project.

Python, multiprocessing and boto3 with assume role. 1000+ accounts takes a few minutes.

[deleted]

Re: An AWS account just for getting into other AWS accounts

#85

Post by hatware »

Akronymus wrote: post #61
hatware wrote: post #56

Earlier quoted context omitted.

> There aren‘t any DMs on Hacker News Good thing they... (checks notes) ...know exactly who made the post and can reach out to them on LinkedIn or email them. Cultural norms are reinforced by good examples, there's nothing good about snippy public comments. Reaching out to them privately isn't hard, and, dare I say it: is more inclusive. I don't think I need to explain the origin of the word assume.

> , there's nothing good about snippy public comments. It didn't seem snippy to me. "Why aren't you disclosing your ties" would be IMO. The message that was actually posted seemed quite diplomatic.

> seemed quite diplomatic

Turns out it is more diplomatic to reach out to someone privately first. God forbid we set a better example than the one being set.

Re: An AWS account just for getting into other AWS accounts

#86

Post by hatware »

JimDabell wrote: post #66
hatware wrote: post #56

Earlier quoted context omitted.

> There aren‘t any DMs on Hacker News Good thing they... (checks notes) ...know exactly who made the post and can reach out to them on LinkedIn or email them. Cultural norms are reinforced by good examples, there's nothing good about snippy public comments. Reaching out to them privately isn't hard, and, dare I say it: is more inclusive. I don't think I need to explain the origin of the word assume.

> Good thing they... (checks notes) ...know exactly who made the post and can reach out to them on LinkedIn or email them. Which I wouldn’t see. I’m glad they posted the comment.

You're only glad because they assumed correctly. Kind of sad you're failing to recognize this.

Re: An AWS account just for getting into other AWS accounts

#87

Post by suzzer99 »

harha_ wrote: post #62
suzzer99 wrote: post #60

Earlier quoted context omitted.

"1500 AWS accounts" You just blew my mind. We have two accounts and it gets messy sometimes.

Messy? Isn't one of the points of having multiple accounts to reduce mess?

Yeah except having to navigate between the two can be tricky. Also that means we have multiple dynamos and multiple cognitos (in our case, test and prod), which is a pain.

I use Firefox for the prod console and Chrome for the test console. Obviously that system doesn't scale past 3-4 accounts. ;)

Re: An AWS account just for getting into other AWS accounts

#88

Post by garbagebin »

deadbunny wrote: post #77
tedk-42 wrote: post #73

These type of articles make me wanna quit doing anything in IT. It's not a criticism of the author, more the current state of technology in AWS. I'd really like to have just 1 AWS account where I can see and do everything there and not keep switching and think about account IDs or which account has what S3 bucket/server whatever.

The really frustrating things is that while AWS make the "Account" their best isolation layer they make managing those accounts with their tooling absolutely awful.

what kind of tooling are you looking for?

Re: An AWS account just for getting into other AWS accounts

#89

Post by dastbe »

hatware wrote: post #85
Akronymus wrote: post #61

Earlier quoted context omitted.

> , there's nothing good about snippy public comments. It didn't seem snippy to me. "Why aren't you disclosing your ties" would be IMO. The message that was actually posted seemed quite diplomatic.

> seemed quite diplomatic Turns out it is more diplomatic to reach out to someone privately first. God forbid we set a better example than the one being set.

> Turns out it is more diplomatic to reach out to someone privately first.

Why

Re: An AWS account just for getting into other AWS accounts

#90

Post by manv1 »

tedk-42 wrote: post #73

These type of articles make me wanna quit doing anything in IT. It's not a criticism of the author, more the current state of technology in AWS. I'd really like to have just 1 AWS account where I can see and do everything there and not keep switching and think about account IDs or which account has what S3 bucket/server whatever.

It's always a tradeoff between blast radius and (in)convenience.

With everything in one account someone might accidentally destroy your production environment. That'll be awkward to explain. And with IAC, it could be as simple as one change to a VPC config that recreates instead of updates the VPC.

In normal IT (not Twitter) you usually have a production and test environment at least. The inconvenience more than makes up for accidentally destroying something in production. And before you say anything, if you haven't done that you haven't been in IT for long enough.

However, if you want to do it your way you should become the director and make it that way. You'll be sorry, but that'll be on your head.

I'm not sure if that's possible, but I haven't checked.

Post reply on HN