HNHacker News
TopNewBestAskShowJobs

_alex_

585 karma · joined April 13, 2015

submissionscomments
_alex_··on Show HN: Credstash – A tiny python utility for managing secrets in EC2
According to the doc revision history: http://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGu... the last update to the developer guide was 2012.

According to the release notes: http://aws.amazon.com/releasenotes/Amazon-SimpleDB the last update to the service was 2011

_alex_··on Show HN: Credstash – A tiny python utility for managing secrets in EC2
The page is still up, and AWS is obviously still running the service (and will as long as customers keep using it), but it's not linked from anywhere. Here's a list of all the AWS services (https://aws.amazon.com/products/) and it's not listed. If you look at the developer guide, it hasn't been updated in three years.

It may not be officially deprecated, but a service tat hasn't been touched in three years, which AWS will only tell you about if asked very specifically, makes me not want to use it as a foundation for any new services.

_alex_··on Show HN: Credstash – A tiny python utility for managing secrets in EC2
SimpleDB is deprecated, more expensive than DDB, and kind of weird to use. Backing your keystore with a deprecated service just sounds like a road to many sleepless nights ;)

The utility does depend on three external services: DynamoDB, KMS, and IAM (for permissioning). This might sound like a lot, but the target usecase for something like this is a fleet running in the cloud. If you're already running in EC2, then using IAM roles to distribute AWS creds is a no-brainer and very simple. KMS and DDB are also not arduous things to depend on if you're already in the cloud.

For credstash, you need to set up your KMS key (and set whatever policies around it make sense for you). Once you do that, there's nothing to manage. Sure, you depend on DDB, but credstash creates the table for you, and unless you need to dial up more throughput (which is a mouse-click operation), you never have to touch it.

_alex_··on Run your own high-end cloud gaming service on EC2
doesn't appstream require that the app is appstream-aware? my understanding is that you can't just take an arbitrary windows binary an appstream-ify it.

The VPN solution might have worse performance than an appstream app, but it works with the existing catalog of steam games.

← PreviousPage 7 of 7