Hacker News Reader

IAM is just low level primitives, you can always create one role with all privileges and act like it doesn't exist.

I put one startup on fly.io just because it was too difficult to communicate AWS intricacies to the founders. I'm ok having a fixed secret to authorize client A to talk to API B where needed, and the actual inner network is all inside wireguard tunnels, automatically provided by Fly.

I use digitalocean for personal stuff because of this