Hacker News Reader

> What do you mean, "IAM doesn't work"? IAM has always worked

What do you mean, "IAM always worked"? The last failure was very recent, only a year ago[0]

[0] https://www.dataminded.com/resources/how-to-protect-against-...

This points to what I keep repeating about the control plane vs. the data plane. IAM faulted to a steady state. While you couldn’t make changes during the impairment, it didn’t cause downstream failures like blocking rule evaluations (or worse, failing open and allowing denied operations to be permitted). That’s the important part.

As the page you linked to stated:

> IAM (Identity and Access Management) configuration was unavailable, preventing updates to roles and policies, but cached credentials allowed most running workloads to continue.

Perhaps I should have been clearer about what I meant about IAM still working. That's on me.

Reply on news.ycombinator.com