That’s interesting. I guess we could set up something that used a combination of CloudTrail/CloudWatch Event/lambda that monitored any EC2 instances that are launched without the required tags and alert someone.
We do have billing alerts set up already that would warn us something went wrong we would have to investigate to find out what.
Better alerting and monitoring is one of our goals this year.
Heck I’m still finding places with hard coded keys in programs instead of letting the SDKs get the keys from the default configuration file (development) or from the instance role when they are run on EC2/lambda. Unfortunately all of the examples do it and the developers didn’t know any better.
We do have billing alerts set up already that would warn us something went wrong we would have to investigate to find out what.
Better alerting and monitoring is one of our goals this year.
Heck I’m still finding places with hard coded keys in programs instead of letting the SDKs get the keys from the default configuration file (development) or from the instance role when they are run on EC2/lambda. Unfortunately all of the examples do it and the developers didn’t know any better.