EthanLabs
Loading amazing content...
Loading amazing content...
Thoughts on web development, technology trends, and best practices
2 posts tagged with multi-tenancy
Instead of trusting every handler to filter by `tenantId`, InvocaCare pushes tenant isolation down to AWS IAM itself — a Lambda authorizer calls STS AssumeRole to hand each request credentials that are structurally incapable of reading another tenant's data
A self-service Cognito sign-up flow was built, then deliberately reverted — because AWS's immutable-tenant-attribute guidance for multi-tenant Cognito pools makes it structurally impossible to assign a new user's tenant before their account exists.