Operations | Monitoring | ITSM | DevOps | Cloud

Now that you are starting to build your FinOps team and slowly changing your organizational culture, it’s time to start putting the teams to work - TOGETHER! In this blog I will provide you with some tools and processes to get you started.

GCP audit logs are a powerful tool that track everything happening in your cloud infrastructure. By analyzing them, you can detect and react to threats. Modern cloud applications are not just virtual machines, containers, binaries, and data. When you migrated to the cloud, you accelerated the development of your apps and increased operational efficiency. But you also started using new assets in the cloud that need securing.

Lateral movement is a growing concern with cloud security. That is, once a piece of your cloud infrastructure is compromised, how far can an attacker reach? What often happens in famous attacks to Cloud environments is a vulnerable application that is publicly available can serve as an entry point. From there, attackers can try to move inside the cloud environment, trying to exfiltrate sensitive data or use the account for their own purpose, like crypto mining.

Although it entered the market later than Amazon and Microsoft, Google Cloud has established itself as one of the top 3 mainstream public clouds through its Platform-as-a-Service (PaaS) and Infrastructure-as-a-Service (IaaS) offerings, with a strong presence in Machine Learning, data analytics and AI (Artificial Intelligence). Google has also become known for an attractive pricing model for its cloud services.

When you’ve chosen Microsoft Azure to host your JFrog Cloud Enterprise or Enterprise+ subscription, you’ll naturally want to make good use of the services Azure provides for security and user administration. DevOps security starts with who has access to your builds, releases, and automation.

One of the most common concerns when moving to the cloud is cost. Given that cloud allows you to turn IT costs from CAPEX (long-term investments ex. in hardware equipment and software licenses) into OPEX (day-to-day operating expenses), it’s crucial to choose the right service and estimate it properly. In this article, we’ll look at the common pitfalls and discuss how you can avoid them to truly benefit from the cloud’s elasticity.