Unless I'm missing something, isn't this whole process made a lot simpler just b... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

hbex5 on Oct 23, 2017 | parent | context | favorite | on: AWS bastions and assume-role

Unless I'm missing something, isn't this whole process made a lot simpler just by using STS?

It also works incredibly well with Vault's STS backend.

bpicolo on Oct 23, 2017 | [–]

Isn't STS exactly what the article is describing? This is just an sts usage pattern

cormacrelf on Oct 23, 2017 | [–]

Indeed, the docs specifically mention it.

http://docs.aws.amazon.com/STS/latest/APIReference/API_Assum...

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact