为什么小团队总是被AWS账单搞得一团糟？
在Reddit上看到有人因为AWS账户被攻破而损失了86,000美元。我听过太多类似的故事——IAM配置错误、代码库中存放令牌、没有账单警报……<p>如果你在一个小团队中，你们是如何保护自己免受这种情况的影响的？有没有一种合理的设置，可以在不需要全职AWS安全人员的情况下有效运作？
查看原文
Saw someone on Reddit lose $86k from a compromised AWS account. I've heard way too many stories like this — misconfigured IAM, tokens in repos, no billing alerts...<p>If you're on a small team, how are you actually protecting yourself from stuff like this? Is there a sane setup that works without needing a full-time AWS security person?