• shalafi@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    13 小时前

    us-east-1 went down. Problem is that IAM services all run through that DC. Any code relying on an IAM role would not be able to authenticate. Think of it as a username in a Windows domain. IAM encompasses all that you are allowed to view, change, launch, etc.

    I didn’t hardly touch AWS at my last job, but listening to my teammates and seeing their code led me to believe IAM is used everywhere.

    • amzd@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      11 小时前

      How is that even legal, I thought there were data export laws in the eu

      • shalafi@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 小时前

        Nothing to do with moving data. But you can’t move data without authentication.

        I want my service to do a $thing. It won’t do $thing without knowing who I am and what permissions I have. The data doesn’t have to cross borders, the service simply needs to function.

        Does that make sense? As I said, didn’t do much in AWS, but the principles are sound.