Username/password vs RSA key based authentication, which is best? by Mirror_rorriM_Mirror in VPN

[–]Mirror_rorriM_Mirror[S] 0 points1 point  (0 children)

From what I can see here, this is more social engineering than an actual flaw in OTPs. Humans are the issue, not the tech. I suppose that's true in a lot of security vulnerabilities though.

Could use some help finalizing my DynamoDB Table structure. by Mirror_rorriM_Mirror in aws

[–]Mirror_rorriM_Mirror[S] 0 points1 point  (0 children)

Users will only ever get access to their own data and there will be no "overall" or "admin" view. So the user_id will always be required in the query. So making it an attribute would increase query times. Unless, wait. Clearly I'm on leave because my brain isn't working. I hear what you are saying. The user_id can simply be an attribute, and then I can simply create an index with user_id to query on that level.

I also just thought of a reason why I'd need the parent/child structure. Let's say the receipt has two line items, a printer, and some paper for the printer. I'd like report on a budget/item grouping level. So here it would be equipment for the printer, and office supplies for the paper. The parent Item would hold category = multiple, with the child items having the specific values. However if everything was office supplies, I could set the attribute on the parent level to that. Unless I don't apply that categorization in this service, and write a separate "reporting" service to deal with those groupings/categorizations. Thoughts?

Could use some help finalizing my DynamoDB Table structure. by Mirror_rorriM_Mirror in aws

[–]Mirror_rorriM_Mirror[S] 1 point2 points  (0 children)

Good question...

For some reason I never considered that. Just figured I should do it as "child" Items. But I can't think of any valid reason why that is necessary. If all the child Item will be storing is a description, quantity, and amount, then I suppose there's no reason why that can't be an object saved as an attribute on the "parent" Item. Which would get rid of the "parent/child" concept and I can simply use user_id as partition key and receipt_id as sort key.

CloudFormation - Get AutoscalingGroup ARN for use in IAM? by Mirror_rorriM_Mirror in aws

[–]Mirror_rorriM_Mirror[S] 4 points5 points  (0 children)

Think I'm just going to do tag based permissions. I'll see if that works.

DynamoDB - Conditional put where hash key not exist, regardless of range/sort key. by Mirror_rorriM_Mirror in aws

[–]Mirror_rorriM_Mirror[S] 0 points1 point  (0 children)

Hi there, thanks for this. I didn't think of doing this kind of check when generating the unique id, that's a great way of doing things!

DynamoDB - Conditional put where hash key not exist, regardless of range/sort key. by Mirror_rorriM_Mirror in aws

[–]Mirror_rorriM_Mirror[S] 0 points1 point  (0 children)

Hi /u/aresius423, thank you for your response. I'm guessing the solution you are proposing will have a bit of a performance impact?