How can I give my server's access to the developer without any risk of compromise
Hi all,
I have someone who would need access to my AWS instance to set up a new service. I just need to make sure that the developer does not do anything fishy like adding a backdoor or do anything that would compromise security. The server holds confidential information.
The developer would need access to install tools like apache, let's encrypt SSL, etc.
How should I go about it?
Hi Hammad
The permissions required to install, configure and operate a web server are sufficient to install, configure and operate anything.
If you don't trust someone else to do the work you'll need to do it yourself.
Have you considered separating the data store from the web server ?