Comment on Amazon Starts Email Service for CompaniesparentComments−jimktrains211yWell, it prevents a single rogue employee from peeking at/stealing data. It now requires a conspiracy between employees.−rdl11yAnd it is way better than just leaving keys in VMs.−geekbeast11yFrom a practical perspective, yes. From a threat model perspective not really.−rdl11yIt protects from a bunch of lesser threats, like backups leaking keys, anyone hacking a front end box getting keys, needing to rotate keys when employees change, etc.
Comments
Well, it prevents a single rogue employee from peeking at/stealing data. It now requires a conspiracy between employees.
And it is way better than just leaving keys in VMs.
From a practical perspective, yes. From a threat model perspective not really.
It protects from a bunch of lesser threats, like backups leaking keys, anyone hacking a front end box getting keys, needing to rotate keys when employees change, etc.