Ben Kehoe·Mar 14, 2023The Meaning(lessness) of Serverless“Serverless” as a term is close to meaningless, and it’s not useful to argue about the definition. So how should we talk about it today?A response icon2A response icon2
Ben Kehoe·Jan 2, 2023The “End of Programming” will look a lot like programmingNobody wants “temperamental and mysterious” products, so what will AI-integrated software development look like?A response icon5A response icon5
Ben Kehoe·Oct 29, 2021AWS IAM Permissions Boundaries Are Incomplete Without PropagationPermissions boundaries are mostly unusable for organizations where developers need to create IAM principals as part of their normal processA response icon4A response icon4
Ben Kehoe·Oct 22, 2021Cross-account role trust policies should trust AWS accounts, not roles, part 2Further details on privilege escalation for cross-account role assumptionA response icon1A response icon1
Ben Kehoe·Oct 13, 2021Cross-account role trust policies should trust AWS accounts, not rolesYour role’s trust policy should be representative of the security boundary and not give a false sense of security.A response icon1A response icon1
Ben Kehoe·Oct 6, 2021Never put AWS temporary credentials in env vars or credentials files — there’s a better wayPlease, I’m begging you — learn about how the AWS CLI and SDK retrieve and refresh credentials. There are such good options!A response icon11A response icon11
Ben Kehoe·Sep 29, 2021AWS IAM Permission Boundaries Has A Caveat That May Surprise YouResource policies can unilaterally grant access, even if it isn’t within the permissions boundary
Ben Kehoe·Sep 22, 2021I Trust AWS IAM to Secure My Applications. I Don’t Trust the IAM Docs to Tell Me How.We need better AWS IAM documentation so that we can confidently and successfully use the extensive power of IAM to gain the security we…
Ben Kehoe·Sep 8, 2021Principals in AWS IAMThis article explains the basics of AWS authentication: the way you gain an identity that you can use to access AWS servicesA response icon3A response icon3
Ben Kehoe·Aug 25, 2021Python multi-line string literals with textwrap.dedent()Line continuations should be avoided in code, but are useful in this case!
