logoalt Hacker News

vintagedave • today at 2:23 AM • 3 replies • view on HN

It's 5:20 AM here in Europe and I just rotated a bunch of keys.

Only to read,

> Because deployments are paused, you will not be able to redeploy your services to pick up the new credentials until builds are restored. We will post here when builds resume with any additional details.

So now my service does not work. Which is worse: a stolen key or a broken product? I'm genuinely regretting following their advice on rotating keys, because logs showed no sign of incorrect usage, and our service would at least have remained online.

I hope that they automatically redeploy their customer services. I just worry that I won't have tested it. I mean: 5AM. Keys changed. Nothing more I can do. Should go back to sleep. No timeline to wake up to check deployments, so... I... wait?


Replies

averrous • today at 2:47 AM

The customers of my company are angry. It is 9.45 AM here in SE Asia. Things are bad.

piazz • today at 2:31 AM

Same situation. Frankly unbelievable - how do you not lead with this? You can't tell customers to rotate their keys and not inform them in the same breath them that actually, environment variable updates currently cannot deploy.

➕ show 2 replies
dylanz • today at 3:16 AM

Yeah, I had to rotate my data store keys ASAP. Now I'm stuck with a broken application. Best option, horrible option.