[twistedpair]

A few times I've found myself looking to automate some AWS task to add/remove a bunch of widgets that their API does not easily allow. Turns out there are a few webapps that will do these things for you. On opening the app, they ask you to give them your AWS keys.

Who actually does this? Personally I fear most devs are not properly creating several groups and users and permissioning them to the bare minimum depending on the app/dev's minimum needs. Then again, AWS's tools don't help as doing X with AWS CLI might really require permission X, Y and Z, something you don't want to discover in production.