AWS security defaults still need fixing on our end

macworks

AWS optimizes for the first five minutes. Your auditor cares about year five, when someone asks who accessed what and the answer has to exist. Those two goals produce opposite defaults, and closing the gap is, by AWS’s own shared responsibility model, your job.

— DEV Community · 12 AWS Defaults That Ship Insecure (and the One Line That Fixes Each)

When AWS gets a default wrong, it’s hard for even AWS to change it. We have to fix it ourselves.