For cloud infrastructure security, it's important to look up the whole stack.

Hardening Your Infrastructure with an Application-Centric View

cloudcoreo Jason Needham 0 Comments

In a past post we talked about the power of context, and how CloudCoreo @Deploy (our deployment time scanning and Jenkins integration) can be used to supply the context needed to make better decisions about whether to alert, who to notify, and how to remediate cloud vulnerabilities. Discovering these issues early allows teams with significant footprints in public cloud services …

Proactive Cloud Security

Proactive Cloud Security with DevOps

cloudcoreo Jason Needham 0 Comments

Recently, there’s been a lot of discussion around how to best integrate security into DevOps. Due to the business emphasis on agility and speed, many organizations are now having to clean up a large pile of technical security debt and are trying to figure out how streamline better DevOps practices in the future. On InfoWorld, Fahmida Rashid writes: “Developers keep …

Rubin's vase, an image that can either be perceived as a vase or two silhouettes

The Power of Context

cloudcoreo George Moberly 0 Comments

It seems obvious to say, but without context, nothing for us as humans makes any sense. I have recently started learning Russian. I was very proud of myself for learning the block letters of the Cyrillic alphabet when I then learned that there is also the cursive letter set, in which several of them just seem like an endless series …

Cloud has many unseen connections and complexities that make it hard to operationalize.

The 3 Dimensions Of Cloud Configuration Complexity (Part 3)

cloudcoreo Jason Needham 0 Comments

The cloud can be extremely hard to operationalize at scale. In our previous posts in this series, we discussed the complexity of Service Sprawl and Inter-Dependencies as well as More Dynamic Applications. Now comes perhaps the toughest dimension of all: People. Complexity #3: Growing Cloud Teams Recently, Gartner calculated that 1.7 million decisions are required for an engineer to simply …

Picture of tools laid out on a workbench

Rugged DevOps vs Responsible DevOps

cloudcoreo Paul Allen 0 Comments

Being a great DevOps guy means a lot of things. Your systems are designed to be up and to stay up. Your pager sits quietly on your nightstand while you sleep soundly. You didn’t even realize you had a 1000x traffic spike this morning because nothing went down and no one had any problems. You may even have a great …

Cloud has many unseen connections and complexities that make it hard to operationalize.

The 3 Dimensions Of Cloud Configuration Complexity (Part 2)

cloudcoreo Jason Needham 0 Comments

If you’re like most organizations moving to the cloud, your cloud infrastructure is expanding rapidly and you’re utilizing more cloud services than you ever imagined. Understanding and operationalizing cloud is extremely hard because cloud configuration is complex. In Part 1 of this series, we discussed the first dimension of cloud complexity: More Services and Inter-Dependencies. Today, we’re going to dive …

Hand reaching for key in the clouds

AWS Password Monitoring & Security Events

cloudcoreo Paul Allen 0 Comments

For many organizations, security is a key concern as they move business critical workloads to the cloud. There have been many claims about the security of the cloud ranging from “inherently insecure” to “more secure than your datacenter,” but the truth is, cloud datacenters really are more secure than yours. The issue lies in the fact that a cloud environment …

CloudCoreo Beta

Introducing CloudCoreo Beta for Faster, Safer, Consistent Cloud Infrastructure

cloudcoreo Jason Needham 0 Comments

Today, we’re happy to announce the launch of our private beta. We have an entire site to talk through our solution, so what I’d like to do here is focus on the problems that we’ve seen and heard in the market from real customers. We began this journey by listening. Over the course of the past year, we’ve had hundreds …