aws / aws-sam-cli

CLI tool to build, test, debug, and deploy Serverless applications using AWS SAM
https://aws.amazon.com/serverless/sam/
Apache License 2.0
6.52k stars 1.17k forks source link

SAM CLI now collects telemetry, this should be OPT IN not OPT OUT #1525

Closed stojanovic closed 4 years ago

stojanovic commented 5 years ago

Description: SAM CLI now collects telemetry, which is ok, but it should be OPT IN, not OPT OUT.

Steps to reproduce the issue:

  1. Update SAM CLI to the latest version (I have SAM CLI version 0.31.0).
  2. Run any SAM command, i.e., sam local.
  3. See the yellow message at the beginning of the SAM CLI command response.

Observed result:

SAM CLI now collects telemetry to better understand customer needs.

You can OPT OUT and disable telemetry collection by setting the
environment variable SAM_CLI_TELEMETRY=0 in your shell.
Thanks for your help!

Learn More: https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/serverless-sam-telemetry.html

Expected result: Telemetry should be OPT IN, not OPT OUT.

simalexan commented 5 years ago

I second this. +1

chrisoverzero commented 5 years ago

The issue tracker for the SAM CLI is a more appropriate place for this kind of feedback.

keetonian commented 5 years ago

Transferred to the correct repository.

jfuss commented 4 years ago

Thank you for the input on the opt-out vs. opt in experience. The AWS SAM CLI collects telemetry, such as generic usage metrics and errors. The AWS SAM CLI does not collect personal information, such as usernames or email addresses. It also does not extract sensitive project-level information. Telemetry is additional information that helps us to better understand our customers’ needs, diagnose issues, and deliver features that improve the customer experience. Happy to connect on a call if you have further questions.

For details of the types of telemetry collected, see Types of Information Collected.

jghaines commented 6 months ago

Has this approach between checked against the EU GDPR and the Australian Privacy Act?