|
|
|
|
“So, as long as you can shift those security decisions to the left, and let the developer fix it before it ends up in your environment, it’s better for you from a security point of view.”
|
|
|
Confusion about boundaries, whether they are between clouds or geographic locations, can make cloud security challenging. Several approaches aim to address the complexity of managing the security of multiple cloud environments, but one metric actually shows security improvement for organizations with more cloud providers.
Almost 29% of organizations that use only one external cloud have an internet-facing host with a high or critical security-related finding, according to RiskRecon and the Cyentia Institute’s “ Cloud Risk Surface Report,” which is based on an analysis of 18,000 organizations. Firms with four clouds have on average only one-quarter the exposure rate. Companies utilizing only one or two clouds are likely in the early stages of public cloud adoption. Although common wisdom states that large companies have better security cloud security postures, this study does not support that claim.
|
|
|
Many have an opinion of what is right — and wrong — about Kubernetes. During this podcast recorded live at KubeCon + CloudNativeCon in Barcelona, The New Stack posed some of the harder questions about Kubernetes’ past and future to Kubernetes co-founders Tim Hockin, principal software engineer, Google, and Craig McLuckie, vice president, VMware. The New Stack also solicited thoughts from Gabe Monroy, partner program manager, Microsoft, who is a lead product manager for containers on Microsoft Azure and described himself as “one of the most engaged early community members.”
|
|
A Cloudless Future?
When we first heard the term “cloudless” last month, we had to snicker a little. The hype cycle has made a complete rotation, to the cloud and back again.
Turns out, HPE coined the term for its HPE Discover conference, which was held in Las Vegas last month. It wanted to describe what it saw was an emerging pattern system deployment with its customers, in which a common fabric is set up to access trust, connectivity and value-oriented resources that could be sourced from multiple clouds, or from the behind the firewall.
“Cloudless Computing dissolves the distinction between the private cloud and the public cloud,” wrote HPE Staff Writer Curt Hopkins. “Cloudless workload endpoints mutually and atomically authenticate, attest, and operate unconstrained by traditional perimeter security discipline.“
In a video interview, HPE Vice President Dave Larson further explained that cloudless is a direct reaction to the idea of cloud native computing, which he charged was is aimed for big operators and locks out small companies except as public cloud consumers.
Although “cloudless” is a vendor-coined term, it does address the ongoing concern of redefining the hybrid cloud, TNS analyst Lawrence Hecht pointed out.
“At its core, it promises to abstract away the boundaries that create so many complications for developers, IT operations and security teams. In this context, ‘cloudless’ is a reinterpretation of a hybrid and multicloud utopia. The urgency of realizing this ideal future is up for debate even though the topic continues to be top-of-mind for those working on cloud security challenges,” he noted.
|
|
|
It’s always inspiring to see new technologies making a real difference in our everyday life. And programmer Emily Shea provided another example at this month’s Perl conference in Pittsburgh. She writes her Perl programs… by voice command.
|
|
|
We’ve been going back to the basics, with Docker that is. If you are new to containers, be sure to check out our series from Jack Wallen on working with Docker containers. This latest installment shows how to connect your stateless container to some stateful storage on the host.
|
|
|
Bare metal server and software provider Packet says it is actively extending its offering to include smaller boxes with more stringent pay-as-you-use server needs, perfect for DevOps testing and iteration.
|
|
|
|
Redis Labs’ Yiftach Shoolman and Nick Ting hand out the swag at Redis Day in New York.
|
|
|
|
Event-goers from ContainerDays 2019 take a thirsty break from the conference at an outdoor beer booth in Hamburg, Germany.
|
|
|
JULY 15-18 // PORTLAND, OREGON @ THE OREGON CONVENTION CENTER
OSCON
OSCON is where to go to understand what’s shaping software development—from AI and cloud technology to distributed computing—and learn how to put it to work for you. You’ll hear from industry heavy-weights like Holden Karau (Google), Rupa Dachere (CodeChix), Julien Simon (AWS), and Alison McCauley (Unblocked Future). 25% off bronze, silver & gold passes with code TNS. Register now!
|
|
|
|
The New Stack Makers podcast is available on:
SoundCloud — Fireside.fm — Pocket Casts — Stitcher — Apple Podcasts — Overcast — Spotify — TuneIn
The New Stack @ Scale is a show about the new concepts of scale for the software and services that run the Internet and beyond. Each month we explore what scale really means for developers and operations managers working with complex services and systems in an increasingly distributed world.
|
|
Cloud native technologies — containers, microservices and serverless functions that run in multicloud environments and are managed through automated CI/CD pipelines — are built on DevOps principles. You cannot have one without the other. However, the interdepencies between DevOps culture and practices and cloud native software architectures are not always clearly defined.
This ebook helps practitioners, architects and business managers identify these emerging patterns and implement them within an organization. It informs organizational thinking around cloud native architectures by providing original research, context and insight around the evolution of DevOps as a profession, as a culture, and as an ecosystem of supporting tools and services.
|
|
|
|
|
|
|
|
|
|
