Comment

Comment by zerotolerance

> 1. configure several distinct S3 resources: the bucket, the bucket policy, 'block public access' configurations >2. create security policies that allow access by authorized principals and denies everyone else >3. adjust standard Terraform resource configurations which generally mirror AWS API defaults to current best practice >4. capture enough context to scale security, governance, risk, and compliance activities efficiently

I feel like the biggest challenge is awareness of these problems. People usually do just enough to "make it work." I just kicked the tires on this module and it "made it work" out of the box.

How do you see people managing a "migration" to this module?

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton