Live data from Hacker News

AWS Lambda as a back end for a single-page app

lg.io

1–10 of 77 posts

Re: AWS Lambda as a back end for a single-page app

#3

Hey, just a heads up, you posted your AWS secret key. I'd take that down and change your key ASAP. I had my keys compromised before and someone racked up a $5k AWS bill mining bit coins.

he mentions in the article he created that account specifically to only have the ability to call that one lambda function - which I didnt realize you could restrict to that level.

Re: AWS Lambda as a back end for a single-page app

#5

Hey, just a heads up, you posted your AWS secret key. I'd take that down and change your key ASAP. I had my keys compromised before and someone racked up a $5k AWS bill mining bit coins.

> One thing you might note is that we’re exposing our AWS public and secret keys. This is actually not that big of a deal. To make this secure, we actually created a new AWS User and with a Policy specifically preventing everything except the one Lambda Function:

Re: AWS Lambda as a back end for a single-page app

#7
post #3

Hey, just a heads up, you posted your AWS secret key. I'd take that down and change your key ASAP. I had my keys compromised before and someone racked up a $5k AWS bill mining bit coins.

he mentions in the article he created that account specifically to only have the ability to call that one lambda function - which I didnt realize you could restrict to that level.

I like this one better because it demos using google auth to get temporary aws credentials:

https://github.com/cloudnative/lambda-chat

Post reply on HN