Comment

Comment by another_devy

> teams that works to identify and mitigate risks

Complete failure by team to not see super user permission as risks

> intrusion detection…

Clearly the did not implement AWS CloudTrail threat detection otherwise when op accessed the account it should have raised alarms, so its just plain lie

> …training on security policy

So the GitHub user probably skipped those considering them boring. And instead of reporting their own failure chose sneaky way to make it go away hoping no one will notice

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton