# AWS 的默认安全配置，还得自己补

> 一句话点评 · DEV Community

---

LLMS 索引： [llms.txt](/zh/llms.txt)

---

> AWS optimizes for the first five minutes. Your auditor cares about year five, when someone asks who accessed what and the answer has to exist. Those two goals produce opposite defaults, and closing the gap is, by AWS's own shared responsibility model, your job.
>
> — [DEV Community · 12 AWS Defaults That Ship Insecure (and the One Line That Fixes Each)](https://dev.to/vadim_albarov/12-aws-defaults-that-ship-insecure-and-the-one-line-that-fixes-each-127f)

AWS default 配置错了官方还真不好改，只能靠自己了