A couple of years ago we reviewed the way we manage our teams’ SSH accesses. We were looking for three key areas of improvement: service-level granularity, flexibility to give time-bounded accesses, and finally good traceability for auditing purposes.
TL;DR we decided to move towards certificate-based accesses with BLESS (by Netflix OSS), an “SSH Certificate Authority that runs as an AWS Lambda function and is used to sign SSH certificates from public keys”. In this first article, we detail why we made this choice as well as alternate solutions we dismissed.
Flexible and Secure SSH access to cloud infrastructure — Part I
- Medium Articles
Watch the video: Flexible and Secure SSH access to cloud infrastructure — Part I
Our speaker(s)
Benjamin Davy
Sustainability Director
There is an important lack of resources to measure the impact of digital services. I’m glad and thankful to be able to work on this issue with such a motivated team!
