The amount of "I've never work at a place where I don't have root and unlimited access" and "not having prod server access is a massive red flag" type posts are constant.
The amount of "I've never work at a place where I don't have root and unlimited access" and "not having prod server access is a massive red flag" type posts are constant.
Some generic SaaS company or tiny startup, yes, engineers should have root access to stuff.
A financial company as big as Binance, though, I'd expect a lot more controls.
Security isn't one size fits all, you need to determine what makes sense for your situation.
Why? Setting up proper CI/CD is a 5 minute task. If you're worried about sharing keys with 3rd parties the pipeline can be self-hosted. There's no need for credentials to live on engineers' machines.
If it’s anything serious like a bank or critical infrastructure, hosting, sensitive data? Lock. It. Down.