ArticCon 2022 (continued)
CLI
pros | cons |
---|---|
most cloud providers CLIs aren’t terrible1 | error dependency ordering and timeouts can be tricky |
the barrier to entry isn’t very high | command returns ‘resource created’, when the request is accepted not when the resource is actually finished |
you can automate this | not declarative / idempotent |
you can restrict this to service accounts limited to a specific scope or subset of resources | still hard to audit |
-
(ok, awscli v2 basically ignores decades of precedent when it comes to shipping binaries) ↩︎