Announcing Baton, an Open Source Toolkit for Auditing Infrastructure User Access

conductorone.com

10 pointsphilips2 comments

The Kubernetes development team always had really great tooling to manage users and their permissions on repos and cloud resources. I am glad to see this project that is trying to tackle this sort of User Access control for all sorts of different platforms.

If you are interested the Kubernetes stuff is all sort of project specific: https://github.com/kubernetes/org

Its cool to see the automation the kubernetes team stuff does against Github -- but has it been expanded to other resources, eg AWS or some other SaaS used?

Other thought I had, is there any concept of expiration of permissions?

Something I ran into when I used to do more Apache Software Foundation work was that, we had thousands of committers with shell access -- but 94% never used it. Are any of the things protected by this privileged? eg, a release private key?

Reply on news.ycombinator.com