Aws credentials are short lived precisely so that leaking them has a time limite... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

epistasis 3 months ago | parent | context | favorite | on: CISA Admin Leaked AWS GovCloud Keys on GitHub

Aws credentials are short lived precisely so that leaking them has a time limited blast radius.

Automatic retrieval, instead of keeping them on disk, is what makes short lived credentials possible.

Sohcahtoa82 3 months ago [–]

I'm not convinced that time-limiting the blast radius matters. It just means that malicious use of the credentials has to be automated, and that's a pretty damn low bar.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact