3

I'd like to build a service where I run a custom setup script on behalf of a user on an t2.micro equivalent instance but be able to probably relinquish access to the server. Any advice on the tech stack and flows that I could use to accomplish this?

Let's assume I have unlimited access to AWS resources to create as many instances as I like. The service is targeted at users unfamiliar with how even ssh works and we are basically setting up a custom software service automatically that runs on their dedicated service. But we need to prove that there is no way we can gain access to this user's server again.

Any help about creative ways to accomplish this?

Improve this question

1 Answer 1

Reset to default
2

Rather than provisioning resources on-behalf of a user which would require them exposing their credentials to you in some way, I would implement this using the various marketplaces:

This has a couple of advantages:

  1. It's fully automated, you are never exposed to their subscriptions thus you don't need to prove that you no longer have access - you never had it in the first place.
  2. Everything is created within the customer's Subscription (Azure), Account (AWS) or Project (GCP) thus they bear all of the costs, you then get money from the cloud provider based upon how you price yourself in the marketplace.
  3. You can generally create more than just a VM, i.e. you could create a PaaS Database for persistence.
Improve this answer
2
  • Thanks. Is there a way to "pass on" AWS credits to users or bear the billing on behalf of users, for my VM on AWS for example, i.e. pay for new users who don't have an AWS subscription?
    – Shadow12348
    Oct 17, 2019 at 8:14
  • 1
    Not sure I fully understand, but if you are serving clients who do not have an AWS account you could operate as a Cloud Solution Provider (CSP) which gives you tools to manage AWS accounts on clients behalf.
    – Richard Slater
    Oct 17, 2019 at 9:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.