gnyman's Twitter Archive—№ 1,111

Yep, but for your own sake take another minute to document what you put where. You don’t want to be like @Metlstorm and get a email saying “somewhere a canary is triggered” (or a certificate expires) Which totally hasn’t happened to me, I know exactly where “test token 123” is… @haroonmeer/1356565280680509442

7) @stevenadair cautions companies to do security right from early on, to protect their AWS root keys.
A corollary:
- Use free https://t.co/NPazxOCncF
- create 100 AWS keys and strew them around
- get a message when they are used

9/12

— haroon meer (@haroonmeer) February 2, 2021