[ec2-beta] Springloops Deployment via SFTP to EC2

[Eric Hammond]

Micah:

The ssh key setup on EC2 is a secure way to give access to  an
individual user for an instance of a public image.  Once you have an
instance running, you are free to do whatever you want with it just like
any other server you control.

At this point, the question is not particularly specific to EC2.  It's
just a general "What's best on an Ubuntu server?".

Using ssh keys is generally more secure than passwords.  Long, random
passwords are generally more secure than short, human generated
passwords.  Pull is generally more secure than push (for the destination
host).  SFTP is generally more secure than FTP.

--
Eric Hammond
ehammond at thinksome.com



Micah Walter wrote:
> Eric,
> Sorry for the delay getting back to you. This question about deploying  
> from Springloops sort of stems from my lack of understanding about  
> security and ssh and how the Ubuntu EC2 logins are set up. So I  
> appologize if this sounds kinda silly..
> 
> Springloops is a Subversion repository service online. It allows you  
> to set up multiple server destinations which it can deploy your  
> projects to via FTP or SFTP. It's pretty simple actually, but I am  
> curious as to weather or not this is a safe thing to do as it would  
> require setting up an FTP server on my instance.
> 
> So far I have just been using ssh to login with my keypair, and have  
> been using scp to move files up and down to my local machine... would  
> there be a risk in setting up an FTP server, or maybe a better way to  
> ask this would be, would this be in keeping with the current ssh  
> keypair style login/security model for the server itself?
> -micah
> 
> 
> 
> 
> Micah:
> 
> It's not clear to me what you're trying to accomplish.  Are you wanting
> to run the web app on EC2 or on Springloops.com?  Are you trying to
> access subversion from EC2? or FTP?  What about the key settings
> concerns you and what key settings are you referring to?
> 
> If you're still having problems, could you rephrase your question and
> provide more details?
>