multi-cloud

Tim Miller (@broadcaststorm, Technical Marketing Engineer, Outshift by @Cisco) talks about new ways to approach the overwhelming security challenges created by cloud-native apps and multi-cloud. 

SHOW: 767

CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotw

NEW TO CLOUD? CHECK OUT - "CLOUDCAST BASICS"

SHOW SPONSORS:

• Find "Breaking Analysis Podcast with Dave Vellante" on Apple, Google and Spotify
• Keep up to data with Enterprise Tech with theCUBE
• CloudZero – Cloud Cost Visibility and Savings
• ​​CloudZero provides immediate and ongoing savings with 100% visibility into your total cloud spend

SHOW NOTES:

• Panoptica (homepage)
• Outshift by Cisco (Emerging Technologies)
• Panoptica - Open Clarity (open source projects)
• Tim Miller (LinkedIn)

Topic 1 - Welcome to the show. Tell us a bit about your background and what you focus on these days at Outshift by Cisco.

Topic 2 - Let’s begin by talking about the security challenges that come with modern applications and cloud environments. 

Topic 3 - The classic challenges of security have always been too many tools, not enough people, lots of misconfigurations, tons of red on the dashboard. Are there new approaches that are trying to address these challenges?

Topic 4 - Talk to us about this concept of “Attack Path Analysis”. What is it? What is it trying to accomplish that we didn’t/couldn’t do before?

Topic 5 - How does Panoptica address many of these challenges? How does it integrate with the many areas of the entire picture, from IaC to CI/CD to Observability?

Topic 6 - What are some differences that DevOps teams might experience by using Attack Path Analysis?

FEEDBACK?

• Email: show at the cloudcast dot net
• Twitter: @thecloudcastnet

This episode of This Week In Enterprise Tech discusses the major cybersecurity recruitment challenges organizations face today and dives into the world of enterprise edge computing and the future of hyperscale cloud services with Scott Evers of Involta.

• News Blips: The hosts discuss a severe vulnerability in Atlassian's Confluence Server that allows attackers admin-level access, how over 100,000 industrial control systems are exposed on the public internet, using fiber optic cables on the ocean floor for earthquake detection, and a Linux "Looney Tunables" flaw threatens most distributions.
• Byte Discussion - Cybersecurity Recruitment: The hosts examine the cybersecurity talent shortage and creative approaches to recruiting, like looking beyond degrees to aptitude and expanding the talent pipeline.
• Interview with Involta Enterprise Architect Scott Evers: Scott discusses his career path from physicist to enterprise architect. Common security gaps he sees in software-defined environments. The importance of workload-focused cloud migrations. How data sovereignty affects cloud choices. The persisting confusion around shared responsibility models.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Scott Evers

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• bitwarden.com/twit
• cs.co/twit
• GO.ACILEARNING.COM/TWIT

This episode of This Week In Enterprise Tech discusses the major cybersecurity recruitment challenges organizations face today and dives into the world of enterprise edge computing and the future of hyperscale cloud services with Scott Evers of Involta.

• News Blips: The hosts discuss a severe vulnerability in Atlassian's Confluence Server that allows attackers admin-level access, how over 100,000 industrial control systems are exposed on the public internet, using fiber optic cables on the ocean floor for earthquake detection, and a Linux "Looney Tunables" flaw threatens most distributions.
• Byte Discussion - Cybersecurity Recruitment: The hosts examine the cybersecurity talent shortage and creative approaches to recruiting, like looking beyond degrees to aptitude and expanding the talent pipeline.
• Interview with Involta Enterprise Architect Scott Evers: Scott discusses his career path from physicist to enterprise architect. Common security gaps he sees in software-defined environments. The importance of workload-focused cloud migrations. How data sovereignty affects cloud choices. The persisting confusion around shared responsibility models.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Scott Evers

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• bitwarden.com/twit
• cs.co/twit
• GO.ACILEARNING.COM/TWIT

Road to Oracle CloudWorld | Cloud Giants Unite

The Big Themes

• Historic multi-cloud partnership: Oracle and Microsoft's recent meeting marks a historic collaboration in the world of cloud computing. Larry Ellison was on the Microsoft campus for the first time, appearing with Satya Nadella. This partnership signifies the culmination of years of effort in promoting multi-cloud tools, making it easier for customers to utilize both companies' services.
• Interconnected clouds: The integration between Oracle Cloud Infrastructure (OCI) and Azure allows for a more seamless experience and eliminates the barriers customers face when dealing with different vendors. Customers can now use Oracle database services just like any other Azure service, simplifying operations and preserving existing commitments.
• Looking toward CloudWorld: The Oracle and Microsoft partnership announcement couldn't have come at a better time, setting the stage for significant discussions and presentations during CloudWorld, with real-life demos and details about different regions. Attendees can also expect a focus on generative AI at the event.

The Big Quote: " . . . essentially, you're able to now use Oracle database services, just like you would any other Azure service. Whether it's a database service or a past service, the experience is no different. The great news is that you can use your Microsoft commitments, but you can also use all of your existing Oracle programs, whether it's your ULA [unlimited license agreement], your support rewards, [or] BYOL [bring your own license]."

Episode 7 serves up an overview of this week's news from the cloud world, enterprise AI readiness, the ARM IPO, Wayfare's cloud strategy and pancakes! Plus, we have a special guest — Dan Jones!

Read the article: https://www.silverliningsinfo.com/multi-cloud/podcast-lunch-ladies-news-wrap-more-ai-arm-ipo-and-ihop

Don't forget to follow Silverlinings on LinkedIn and Twitter to catch the headlines as they happen and sign up for our weekly newsletter here.

Hosts: Liz Coyne and Diana Goovaerts

Producer: Matt Rickman

Content Manager: Samantha Bookman

See omnystudio.com/listener for privacy information.

Joe Duffy (@funcOfJoe, Co-Founder/CEO @PulumiCorp) talks about the evolution of infrastructure as code, the challenges of multi-cloud, and applying Generative AI to Ops.

SHOW: 751

CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotw

NEW TO CLOUD? CHECK OUT - "CLOUDCAST BASICS"

SHOW SPONSORS:

• Reduce the complexities of protecting your workloads and applications in a multi-cloud environment. Panoptica provides comprehensive cloud workload protection integrated with API security to protect the entire application lifecycle.  Learn more about Panoptica at panoptica.app
• Find "Breaking Analysis Podcast with Dave Vellante" on Apple, Google and Spotify
• Keep up to data with Enterprise Tech with theCUBE

SHOW NOTES:

• Pulumi (homepage)
• Pulumi Insights (LLM - Generative AI)
• New Features (NewStack article)
• The Cloudcast #388, The Cloudcast #657
• Sept 14th Webinar
• Sept 19th Webinar

Topic 1 - Welcome to the show. Tell us a little bit about your background. What made you found Pulumi and you have an extensive developer background at Microsoft as well.

Topic 2 - Pulumi’s been in the market for 6+ years and we first spoke 4 years ago. Has the IaC space “settled down”? Do you consider it still emerging, evolving, or mature at this point?

Topic 3 - We’re seeing a lot of organizations manage resources and infrastructure across multiple clouds. What are the big challenges of multiple vs. single clouds?

Topic 4 - Another big trend is of course Generative AI. You recently announced Pulumi Insights. Can you tell everyone about how this came to be and the problem you are trying to solve?

Topic 5 - Let’s talk about culture quickly. How do organizations, especially large organizations with many groups and tools, standardize tools and processes? What are the big hurdles that need to be overcome?

Topic 6 - OSS has been in the news lately, especially around the Terraform project. What are your thoughts on OSS and its place in IaC both today and going forward?

Topic 7 - We see you have a big webinar coming up. It looks to be a great place to dig in and get started. Tell everyone about it for those out there that want to know more.

FEEDBACK?

• Email: show at the cloudcast dot net
• Twitter: @thecloudcastnet

Operating in multi-cloud environments can create additional complexities around how you manage both human and machine identities. In this episode, Jim talks to Eric Olden , CEO from Strata. They discuss leveraging identity abstraction and resource management across both native and hybrid multi-cloud environments to minimize redundancy, reduce complexity, and understand exactly who is accessing what. Then, they dig into machine based identity orchestration and the new Identity Query Language which helps create a consistent representation of identity policy in different systems. 

If you’re responsible for managing and securing multi-cloud environments, this is a must listen.

Listen to other Navigating the Cloud Journey episodes here.

This is part of an ongoing series entitled “Customer Zero” where we talk with the member of the VMware IT leadership team who are the first to use the products that our engineering teams produce. Through conversations with IT and engineering, we see how they are leveraging the technology to solve the same hard problems our customers are challenged with. From Multi-cloud complexity and app modernization to the needs of the new workforce, we hear how they are changing IT and the business. 

In this episode, I have a conversation with VMware’s VP of Network Services and VMware on VMware John Drummond and VP IT/CTO Operations Jerry Ibrahim as they talk about cloud transformation and the move to multi-cloud—what is it to be cloud smart what it means for VMware teams.

For enterprise organizations that are moving to the cloud, they often utilize multiple cloud solutions and vendors. This, naturally requires a different approach to planning. Furthermore, to secure these environments requires a comprehensive strategy that is well documented, flexible, performant, and meets your compliance needs. Recorded live at Cisco Live 2023, Stephen Goudreault and Nitin Negi from Micron Technology break all of this down.

Listen to other Navigating the Cloud Journey episodes here.

At RSA this year, Kristi Thiele sat down with Tom Clavel from ExtraHop to talk about strategies and tactics to prevent ransomware attacks. They discuss threat hunting, remediation practices, considerations for cloud environments, and why it's critical to have the right level of visibility into your network traffic.

Listen to other Navigating the Cloud Journey episodes here.

As supercloud (also referred to as multi-cloud) emerges, tying together disparate environments into a distributed computing paradigm necessitates developer buy-in. In this episode, originally recorded during the January 2023 Supercloud event, theCUBE hosts Dave Vellante & John Furrier sit down with VMware’s Vittorio Viarengo and Sarbjeet Johal, industry influencer and Analyst at StackPayne. In this session they focus on the role of developers in the supercloud buildout and how organizations can align developer and line of business priorities.

Also, watch our newest Multi-Cloud Briefing event, Navigate Economic Headwinds with a Cloud-Smart Approach. This Briefing focuses on helping multi-cloud IT organizations succeed in today’s challenging macroeconomic environment–not only to survive the economic storm but to emerge from it in an even stronger position.

Multi-Cloud briefing: https://blogs.vmware.com/multi-cloud/2023/03/21/vmware-april-2023-multi-cloud-briefing/

In this episode, we speak with Steve Lipner, Executive Director of Safe Code, and Karen Worstell, VMWare Cyber Strategist. They discuss the new scale of DevSecOps, secure code, and safely adopting new technologies. 

Karen describes how modern operating environments differ from older ones, and the concerns involved with quickening development cycles. Steve explains the work of his nonprofit, Safe Code, and the importance of integrating security with a development cycle. They also discuss the future of cloud infrastructure and get into the benefits and possible pitfalls of Chat GPT.

---------

Key Quotes:

Karen 

"What’s really really different? The type of code we're writing has changed. The operating environment that we're pushing it into has changed. And the time cycle has really changed. It's a concern, to be honest. It's a benefit, but it's also something that worries people."

Karen

“The cycle has revved up tremendously and it's changed the way we work. So DevSecOps basically means that you've got this development cycle and then you've got the operations of it on an ongoing basis.”

Steve 

"The role of the security team is to help organize, train, and equip so that the developers have the right processes, the right training. They know what a security bug looks like and why you don't want to have one. And the right equipment, the right tools to tell them when they need to do something differently and what to do about it."

Steve 

"If you want a thousand person security team, then the way to do that is  to do all the audits and all the testing, and all the security reviews and all the compliance after the fact. If you want secure software out there this afternoon, the responsibility for building secure software has to be with the developers.  The role of the security team is to help organize, train, and equip so that the developers have the right processes, the right training."

Karen:

“I think the truth of it is that in the technology world, where we're surrounded by new technology, and we're used to that cycle of new technology evolution and adopting it like early adopters, we can get out over the skis when it comes to the rest of the world…Technical debt is our biggest risk, my opinion.”

---------

Time stamps:

(02:45) What DevSecOps means

(04:40) Leveraging DevSecOps as a leader

(08:20) The development cycle’s acceleration 

(10:05) Safe Code’s mission

(10:55) Old dev cycles vs. new ones

(12:05) Building a secure development model

(14:50) Difficulties behind a security push

(17:40) Recognizing the importance of security pushes

(19:55) Exploring the move to cloud

(21:00) How the modern world adopts new technology

(24:00) The risks of AI acceleration 

(30:05) Where to connect with Karen and Steve

---------

Links:

Steve’s LinkedIn: https://www.linkedin.com/in/steve-lipner/

Steve’s website: https://www.stevelipner.org/

Steve on Twitter: https://twitter.com/lipner?lang=en

Karen’s LinkedIn: https://www.linkedin.com/in/karenworstell/

CIO Exchange on Twitter: https://twitter.com/vmwcioexchange
Yadin Porter de León on Twitter: https://twitter.com/porterdeleon 

[Subscribe to the Podcast] 
On Apple Podcast: https://podcasts.apple.com/us/podcast/cio-exchange-podcast/id1498290907 
For more podcasts, video and in-depth research go to https://www.vmware.com/cio

---------

Keywords: 

cio, cio exchange, VMware, innovation, leadership, IT, information technology, technology, cto, cloud, multi-cloud, security, devops, devsecops, artificial intelligence, machine learning, AI, Chat GPT, development cycles, technology leadership, AI security

In the episode, Jim talks to Head of Software Innovation at Veloce Energy, Arila Barnes. Arila has extensive experience in enterprise software and product management. She is an expert in edge computing and IoT solutions. 

Jim and Arila discuss edge/IoT computing, multi-cloud deployments, Machine2Machine Zero Trust, Observability in the cloud and much more.

Listen to other Navigating the Cloud Journey episodes here.

This conversation is part of our Lead/Forward series, where we talk with technology leaders about the real stories behind the themes of innovation, talent, and experience. In this episode, we interview Ginna Raahauge, CIO at Zayo to find out more about the current state and future of the expanding definition of DevOps and what application modernization really means within the new environments the applications are being consumed. She explains how Covid has accelerated the diversification of application use in the office and at home. Ginna delves into the need for enhanced internet speed and bandwidth capabilities, as well as new considerations for implementing security measures earlier in the development process. She also talks about pushing further into the edge, scaling in the cloud, and the trials and tribulations of understanding legacy applications while investing in infrastructure and talent to upskill and modernize for the future. 

---------

Key Quotes

“When you think about the infrastructure by which the foundation you are deploying your applications, the developers are really having to think about that differently, have more immersive conversations around what that architecture looks like, what the risks in that architecture are, or the assumptions that have really changed in their development aspects of that.”

“Developers are so much more closer to the impact of the experience, whether it's consumer, partner, customer, or even end user inside like an employee experience. And, it just is becoming so much more blended and immersive.”

“We are still going through that transformation of really what is DevOps? We've been trained on the traditional or the more longstanding DevOps methods and agile taxonomy. But, I do think that it's still early given the new environmentals of hybrid and just the pure consumption demand over more wavelength and 5G types of experiences, versus hard line experiences or fiber to the house. Not everybody has that.”

“I think that the definition of DevOps is expanding and getting bigger and we're seeing where those edges are blending, and we have to think about some of those experiences in that and they have to develop differently.”

---------

Time stamps:

01:15 Shift in Technological Acceleration and Application Performance

04:45 Breaking down Bandwidth

07:30 Developer Redevelopment of Approach

10:15 Evolution and Reskilling of DevOps

14:15 DevSecOps Considerations with User Experience

10:15 Future Developers Understanding Legacy

25:45 Producing New Ideas Without Old Constraints

29:15 DevOps and Cloud

---------

Links:

Ginna Raahaug on LinkedIn: https://www.linkedin.com/in/ginna-raahauge-9b4275/

CIO Exchange on Twitter: https://twitter.com/vmwcioexchange
Yadin Porter de León on Twitter: https://twitter.com/porterdeleon 

[Subscribe to the Podcast] 
On Apple Podcast: https://podcasts.apple.com/us/podcast/cio-exchange-podcast/id1498290907 
For more podcasts, video and in-depth research go to https://www.vmware.com/cio

---------

Keywords: 

cio, cio exchange, VMware, innovation, leadership, DevOps, Developer, Developers, ops, operations, IT, information technology, business, technology, cto, devsecops, security, cloud, multi-cloud, hyperscaling, hyperscalers

What’s stopping your business from deploying applications 50% faster to increase market share and boost revenue? For Jeff Shaw, CIO of EMPLOYERS Insurance, it was finding the right place to run the right application with the agility and scalability of the cloud. This meant leveraging not one cloud, but multiple clouds to take advantage of the best tools that each one had to offer while at the same time, managing them as if they were one cloud. In this episode, Jeff is joined by his VP of Cloud Infrastructure Dale Ramsey and together they describe the journey they took to move all their applications off of aging infrastructure, and run them in multiple clouds while ensuring that everything worked together seamlessly. Throughout the conversation, we discuss the real challenges that the business faced when it came to evaluation, training teams, and executing what seemed, at first, to be impossible. During the discussion, Jeff reveals what he considers to be the key elements for successfully taking advantage of all the best tools of each cloud while ensuring that security and customer experience are not compromised. 

---------

Links:

Jeffrey Shaw's Profile: https://www.employers.com/management-team/jeffrey-shaw

CIO Exchange on Twitter: https://twitter.com/vmwcioexchange
Yadin Porter de León on Twitter: https://twitter.com/porterdeleon 

[Subscribe to the Podcast] 
On Apple Podcast: https://podcasts.apple.com/us/podcast/cio-exchange-podcast/id1498290907 
For more podcasts, video and in-depth research go to https://www.vmware.com/cio

---------

Keywords: 

cio, cio exchange, VMware, innovation, leadership, DevOps, Multi-Cloud, Cross-Cloud, Oracle Cloud, IBM Cloud, Microsoft Azure, AWS, VMC, Developers, ops, operations, IT, information technology, business 

The Big Themes:

• Customer demand for multi-cloud: Oracle has been focused recently on partnerships with Microsoft and Amazon that allow mutual customers to pick and choose the cloud services they get from each vendor, and Jae says that big-name brands are very hot on this idea.
• Cloud @ Customer offers even more flexibility: For customers in highly regulated industries or that prefer more control and security, Oracle's Cloud @ Customer offering provides all the benefits of a fully managed cloud region in an on-premise environment.
• What customers can expect at CloudWorld: Jae says that if customers can come to the event with a clear understanding of their business goals and desired outcomes, they'll find a plethora of information about how Oracle's cloud solutions can help achieve them.

The Big Quote: "These are more multi-cloud-type solutions that are making it simpler and advantageous for our customers to use. We have a lot of customers who are excited about it—AT&T, Marriott, and Veritas to name a few—who have really voiced their interest and excitement about what this can do for them... getting that flexibility and optionality so they can get the best cost, best performance for their cloud business."

Want to learn more about Oracle CloudWorld 2022?
Explore content, speakers, and registration options.

This episode is sponsored by Oracle.

The Big Themes:

• Enhancing the developer experience: This is a major focus for Oracle, and many CloudWorld sessions will focus on work that's been done to help developers use Oracle DBs, including Autonomous Database.
• Oracle Exadata: Along with database and cloud, Juan says that Exadata is one of three core initiatives for the event.
• Oracle Database 23c release: CloudWorld will feature the very first preview and discussion of Oracle's next major DB release, called 23c.

The Big Quote: "We're also talking about what we're doing for distributed apps, like micro-services and events. We're building a lot of this technology directly into the Oracle database to make it dramatically simpler. We'll be talking about things we're doing with documents and document databases—that's going to be a really big deal."

Want to learn more about Oracle CloudWorld 2022?
Explore content, speakers, and registration options.
 

This episode is sponsored by Oracle.