How were they 0wned? Lack of MFA, rogue API key, or something else? Are full-access accounts being handed out willy-nilly instead of IAM accounts?<p>AWS Multi-Factor Authentication (MFA):<p><a href="http://aws.amazon.com/iam/details/mfa/" rel="nofollow">http://aws.amazon.com/iam/details/mfa/</a><p>AWS Identity Access and Management (IAM):<p><a href="http://docs.aws.amazon.com/IAM/latest/UserGuide/IAMBestPractices.html" rel="nofollow">http://docs.aws.amazon.com/IAM/latest/UserGuide/IAMBestPract...</a><p>Managing your AWS API Keys:<p><a href="http://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSGettingStartedGuide/AWSCredentials.html" rel="nofollow">http://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSG...</a><p>Go a step further with your AWS API keys and use AWS' API access logging (CloudTrail):<p><a href="http://aws.amazon.com/cloudtrail/" rel="nofollow">http://aws.amazon.com/cloudtrail/</a><p>Don't get burned. Check your stuff out.
Full-blown AWS console compromise - this sounds similar to what happened to Code Spaces (<a href="https://news.ycombinator.com/item?id=7909791" rel="nofollow">https://news.ycombinator.com/item?id=7909791</a>) Is there a new vulnerability?
Any word on how those accounts are getting compromised?<p>Have they been complacent (easy password to guess, keys easy to be compromised (maybe in a public github repo)), or could there be some whole in the AWS secutiy model?
This brought my app down. <a href="http://jrdevjobs.com" rel="nofollow">http://jrdevjobs.com</a>.
Our shards were all missing from Bonsai.
We looped through each model and saved it.<p>We're back up.
This sucks... I am happy we just put our search cluster on elasticbeanstalk atm, but I wish we had more services like this running.. good news is new security practices will hop up everywhere because of this.
our site <a href="http://www.violetgrey.com" rel="nofollow">http://www.violetgrey.com</a> went down because of this. Luckily we were able to reindex pretty fast before their backups kicked in. Any ideas on how to have fallbacks in such cases?