• [object Object]@lemmy.ca
    link
    fedilink
    English
    arrow-up
    24
    ·
    17 hours ago

    This happens because you let it happen.

    At some point someone either clicked allow or disabled permissions.

    The prod system should also be isolated from a single dev in some way as well, and the backups too.

    Edit:

    the cloud provider’s API allows for destructive action without confirmation, it stores backups on the same volume as the source data, and “wiping a volume deletes all backups.” Crane also points out that CLI tokens have blanket permissions across environments.

    Yeah, that’s stupid.