Amazon CBA to Sanitize User Input
-
Today I have been tasked with setting up an AWS account for the company which writes my paycheck. No problem. I'm going along, filling out the fields, when this greats my eyes:
Seriously‽ I can understand some of those, but there are companies that use "&%' in their name. You can't omit valid characters simply because you CBA to do proper input sanitization.
-
Amazon is TRWTF
-
I guess AT and T doesn't use AWS.
uh
-
Not my fault this time...
-
-
Amazon is TRWTF
QFFT
References: I work with AWS and Amazon stuff on a daily basis. They're doing EVERYTHING wrong.
-
Any company like Wendy's is also prohibited.
-
McDonald's and Macy's would be a couple big ones.
-
Ben & Jerry's gets a double whammy.
-
All I know about AWS is that it has no simple input box where you can specify the maximum amount you want to pay. Meaning you could wake up tomorrow with $10,000 in charges because someone spammed your website with the right petitions.
Oh, you can setup alerts, yes, but not limits. Don't ask me why.
-
All I know about AWS is that it has no simple input box where you can specify the maximum amount you want to pay. Meaning you could wake up tomorrow with $10,000 in charges because someone spammed your website with petitions.
Oh, you can setup alerts, yes, but not limits. Don't ask me why.
From what I can determine, it looks like dedicated instances don't have that sort of issue. They don't auto scale. That's what I've been tasked with setting up, so should be a non-issue.
-
bandwidth
Don't ask me why.
Cause they don't care if you overcharge your account. Oh, woops, you owe us more money. Oh well.....
Seriously, that's the attitude pretty much everywhere Amazon.
-
bandwidth
Ah. Right. Well, if you can, make sure to set up some sort of verification method to reject invalid posts. Or, to be more flexible, you avoid a scenario like @anonymous234 proposed by blocking an IP after x petitions in a given timeframe.
-
Oh, you can setup alerts, yes, but not limits. Don't ask me why.
There are some obvious and less obvious reasons why there is no "shutdown my service" when X $$$ amount was reached.
But from what I can see, you can run an action based on those Alerts.
so if you know what you are doing you can probably setup some financial protection.
-
Seriously, that's the attitude pretty much everywhere Amazon.
Listen to @sloosecannon. He knows. Amazon charged him so much he couldn't finish that sentence.
-
Ahem.
I am using the word Amazon in the "everywhere Amazon controls" sense.I would write up a pendantry badge-worthy response, but it's 8:41 and E_LOW_CAFFEINE
-
I would write up a pendantry badge-worthy response, but it's 8:41 and E_LOW_CAFFEINE
One can tell, because pendantry is a barrier to humor.
-
-
That's what I've been tasked with setting up
Task is not a verb. It's what you've been told to do, or what you are required to do. This is simple stuff, it's not a big ask
-
Create a billing alarm to monitor your estimated AWS charges - Amazon CloudWatch
