If there's one website I would never in a million years let a closed-source, venture-backed browser extension inject content into, it's console.aws.amazon.com. What a terrifying thought...
Hey, CEO of Deref here.
In our customer discovery calls, we've heard so much about how folks dislike the AWS Console. We figured we should do something about that!
This extension is super early days, but we'd love for it to grow. Feedback welcome!
email: hello@deref.io
twitter: @deref_inc
I think AWS console has a lot of room for improvement. However, I think of it as a feature, since I'm trying very hard to have people do everything in the infra as code, rather than clicking buttons, and the worse the console is, the better ;)
For a more secure approach, you might find Vantage interesting: https://www.vantage.sh/
Useful enough tool. Sadly I feel very nervous about any permissions on my AWS account so it must remain uninstalled. It's a pity, though.
I guess I could load it unpacked but the utility isn't high enough for me to go through the source myself.
AWS Enhancement Suite sounds like an AWS product. Consider calling it:
Enhancement Suite for AWS or
Deref Enhancement Suite for AWS
to avoid confusion?
AWS is one of the main examples of why I miss the days when things had dedicated, native applications. I can imagine the AWS console being so much easier to use if it was something like Intellij. I don't even like Intellij compared to Sublime, but at least Intellij has an undeniable amount of power and customization. Meanwhile the AWS console is a drag to use and gets worse if you use the new UIs
doesn't matter how cool this is, i would never use sth like this
Pro-tip: Describe what this actually does. "adding functionality like price estimates for resources." is vague.
The Chrome extension asks for permission to "Read and change your data on all auth0.com sites, all aws.amazon.com sites, and all deref.io sites"
That's a LOT of power to give some random extension to my AWS account. I'm not going to do that unless I know EXACTLY what it does, how, and why.
The vaguer you are, the less I trust you.
And that doesn't get into why this extension also needs access to auth0 which is not described in the overview at all.