romeel

Shifting Security left – moving to a DevSecOps model

As more and more organisations shift their infrastructure and applications to Public cloud one of the biggest questions arises is how will they approach security. Organisations who are leveraging the dynamic nature of cloud with modern DevOps practices are also realising that traditional approaches to security are outdated. With the advent of Infrastructure as Code,Continue reading “Shifting Security left – moving to a DevSecOps model”

The State of DevOps

I first heard the term DevOps about 5 years ago. I was transitioning from a world where words such as Agile, scrum, iteration, product backlog were the common parlance of developer discourse. Endless debates about what scrum and Agile was and not confusing the two. At the same time is was trying to understand whatContinue reading “The State of DevOps”

Compliance via Code

Cloud Governance with Cloud Custodian – Part 1 Before talking about Cloud Custodian i would like to mention Azure policies. Azure policy is the out of the box policy engine that Microsoft provide as part of your Azure subscription. It uses a declarative syntax using JSON to define policies (security, audits and others) governing andContinue reading “Compliance via Code”

The Cloud native landscape

Over the last couple of years the Cloud native bandwagon has been gaining traction. Public cloud providers are becoming a key cornerstone in organisations strategy to disrupt, innovate and surface products and services to end consumers in ways they could never think of during the days of static infrastructure in traditional data centres. The aboveContinue reading “The Cloud native landscape”