EthanLabs
טוען תוכן מדהים...
טוען תוכן מדהים...
מחשבות על פיתוח אינטרנט, מגמות טכנולוגיות ושיטות עבודה מומלצות
2 posts tagged with multi-tenancy
Instead of trusting every handler to filter by `tenantId`, InvocaCare pushes tenant isolation down to AWS IAM itself — a Lambda authorizer calls STS AssumeRole to hand each request credentials that are structurally incapable of reading another tenant's data
A self-service Cognito sign-up flow was built, then deliberately reverted — because AWS's immutable-tenant-attribute guidance for multi-tenant Cognito pools makes it structurally impossible to assign a new user's tenant before their account exists.