Adding Guardrails To A Cloud Account After The Fact

Originally published at: Adding Guardrails To A Cloud Account After The Fact - Skycrafters

When faced with deploying a new feature that directly helps customers or security guardrails that may help in the future, it’s hard to argue against the customer.

2 Likes

Great article, @marknca!

Loving seeing content already being responsive to the community! :slight_smile:

2 Likes

I really like the Estimated time to resolve, Level of effort and Return on Investment approach. It makes simpler to know which aspect to tackle first.

I think lack of awareness is real, but probably not the main factor. If I had to bet, I would put my money in positioning from the security team. My feeling talking to different cloud users is that Dev had a head start and Security is still trying to close the gap, usually with tactics similar to the ones you mentioned:

This isn’t a way to close the gap, just to make it larger.

1 Like