Viewing a single comment thread. View all comments

papoosegoose t1_iu21lz0 wrote

> This was not an AWS issue; AWS is secure by default and performed as designed,”

Yeah, someone left that door wide open on purpose for sure.

70

Etiennera t1_iu392wk wrote

Or, it’s an intern project and the team barely glossed over the design, missing that the site would be exposed to the internet.

I mean could be anything, but hell if i’m reading the article.

13

9-11GaveMe5G t1_iu2k9me wrote

When other Amazon units cant figure out how to secure AWS, maybe it is an AWS problem

4

robothead t1_iu2v4z6 wrote

Not really. A bad carpenter blames his tools, and a bad dev team blames AWS when they choose not to follow industry standard security practices.

12

zomgkittenz t1_iu3i7e5 wrote

Eh. That may be an aphorism. But in reality there are some REALLY terrible tools.

For example, there are plenty of combination table/miter saws in countries with no regulations. Those will send you to the hospital with permanent disfiguring injuries. Even the best tools can kill/maim a carpenter. Sometimes the tools are just inherently dangerous.

5

Wolpfack t1_iu2u1e2 wrote

The problem is probably with the admin(s) of the server rather than AWS itself.

6

Latter_Ad9909 t1_iu3lfng wrote

AWS and Amazon.com are so far removed from each other internally that these might as well just be two entirely separate unrelated companies in regards to something like this. It’s not like Amazon prime just calls over AWS engineers to build out their platform. They most likely use AWS just like any other customer would.

Also AWS is so massive. I can assure you no single person can get it all perfect. Not even an AWS employee. Honestly especially an AWS employee. They spend all day working on the backend so I would bet most AWS employees have far less exposure to using AWS than the customers do.

User error in configuration is inevitable. Mistakes happen.

5

iEatTigers t1_iu5mbr3 wrote

This is accurate. Amazon uses AWS internally just like any other customer. Human error in networking is inevitable at scale

2