12 Talks of Cloudmas - What NOT to do with your shiny new AWS account

On the 9th day of December, our true love gives to us: 12 ignite talks.

This event will feature twelve highly entertaining 5-minute talks. The Ignite format has contains 20 slides, auto-advancing every 15 seconds. Topics will range from new service features to cool tricks you can do with AWS.

We'll have food and a stocked bar so grab a holiday drink, sit back, and enjoy the festivities!

Transcript

1. What NOT to do with your shiny new AWS Account John Martinez 1
2. Because buying a UFO Detector and using AWS are the same thing. Really. Sign Up with your personal Amazon account 2
3. IT is going to keep your inbox around for ever right? Don’t use a distribution list email address 3
4. Is saving a few bucks in S3 costs really worth it? Don’t enable CloudTrail 4
5. Never audit your configurations 5 We just make this stuff up at every deployment
6. It takes way too long to set up IAM Use the root account credentials 6
7. Give 3rd parties my API access keys 7 Key management is so 2008
8. Wake me up in 90 days Don’t rotate API access keys 8
9. It takes way too long to set up IAM Don’t enable MFA tokens 9
10. We trust everyone, right? Make everyone an admin 10
11. In clear text. Place API Access keys on instances 11
12. EC2 instances never die… Don’t use autoscaling 12
13. That’s right Mr./Ms. Moneybags Don’t buy reserved instances 13
14. Use the default security group 14 Or even better, just open ALL from ALL
15. Don’t use CloudFormation 15 I like to build everything by hand.
16. S3 bucket ACLs should be readable and listable 16 By everyone. On the internet.
17. Don’t tell IT/ Infosec/Boss that you’re now in AWS 17 You’re cool They’re not
18. If I close my eyes really tight, this guy problem will go away on his own! Don’t report compromises to anyone 18
19. Don’t read the docs 19 I love to learn the hard way
20. An above all else… 20 Do the opposite of everything I just said