alt Hacker NewsWhat’s the value of having a ton of silo’d accounts, especially for the use case demonstrated by the readme where there are multiple staging and production accounts?
Replies
casper14 • yesterday at 11:34 PM
This is not super uncommon, especially when selling to enterprises who demand complete data isolation.
0hardik1 • yesterday at 11:55 PM
[dead]
Blast radius. One example… What happens when you give an identity s3:* on resource: *? It can read/modify every bucket in the account that doesn’t have a resource policy with an explicit deny.