Content Deep Dive
What is the “Goldilocks” number of cloud-computing accounts to limit your blast radius?
Blog post from Twilio
Post Details
Company
Date Published
Author
Brandon Sherman
Word Count
1,187
Language
English
Hacker News Points
-
Summary
The concept of having multiple cloud-computing accounts is discussed, focusing on reducing the "blast radius" or damage caused by a security breach. Separate accounts can limit credentials such as API keys and reduce the risk of an attacker gaining access to sensitive resources. Benefits include separating development and production workloads, improving speed, and containing outages. However, there are tradeoffs between one account with many services versus many accounts with individual services, and the ideal number of accounts depends on the specific service's complexity and business needs.