When everyone has their own identity, it becomes easier to understand who has access, who made a change and whose access should be removed.
#CloudSecurity #EmmanueleTech
When everyone has their own identity, it becomes easier to understand who has access, who made a change and whose access should be removed.
#CloudSecurity #EmmanueleTech
Inputs, expected results and possible failures.
Otherwise, automation can just make the wrong process happen faster.
#Automation #EmmanueleTech
Inputs, expected results and possible failures.
Otherwise, automation can just make the wrong process happen faster.
#Automation #EmmanueleTech
Would you make all five administrators?
I wouldn’t.
I’d first understand what each person actually needs to do and assign access around those responsibilities.
#CloudSecurity #EmmanueleTech
Would you make all five administrators?
I wouldn’t.
I’d first understand what each person actually needs to do and assign access around those responsibilities.
#CloudSecurity #EmmanueleTech
While you investigate the problem, people also need to know what is happening.
You may not have the answer yet, but you can communicate what you know.
#ITOperations #EmmanueleTech
While you investigate the problem, people also need to know what is happening.
You may not have the answer yet, but you can communicate what you know.
#ITOperations #EmmanueleTech
Access should match responsibility.
Give people what they need to do their work without giving away unnecessary control.
#AccessManagement #EmmanueleTech
Access should match responsibility.
Give people what they need to do their work without giving away unnecessary control.
#AccessManagement #EmmanueleTech
It is one of the questions I like asking when reviewing infrastructure.
You don’t make failure impossible. You design so the failures that matter don’t take everything down.
#CloudInfrastructure #EmmanueleTech
It is one of the questions I like asking when reviewing infrastructure.
You don’t make failure impossible. You design so the failures that matter don’t take everything down.
#CloudInfrastructure #EmmanueleTech
What does this system depend on?
Once you understand the dependencies, you can test them instead of guessing.
#CloudEngineering #EmmanueleTech
What does this system depend on?
Once you understand the dependencies, you can test them instead of guessing.
#CloudEngineering #EmmanueleTech
How do I configure it?
Important.
Why does the architecture need it?
Just as important.
Knowing how helps you build. Understanding why helps you design.
#CloudEngineering #EmmanueleTech
How do I configure it?
Important.
Why does the architecture need it?
Just as important.
Knowing how helps you build. Understanding why helps you design.
#CloudEngineering #EmmanueleTech
Everything works.
Would you start changing things?
I wouldn’t.
First I’d understand the architecture and trace how traffic, routing and access work.
Understand before you optimize.
#CloudInfrastructure #EmmanueleTech
Everything works.
Would you start changing things?
I wouldn’t.
First I’d understand the architecture and trace how traffic, routing and access work.
Understand before you optimize.
#CloudInfrastructure #EmmanueleTech
I don’t only want to know how to create infrastructure.
I want to understand how the pieces work together and what happens when something fails.
#CloudInfrastructure #EmmanueleTech
I don’t only want to know how to create infrastructure.
I want to understand how the pieces work together and what happens when something fails.
#CloudInfrastructure #EmmanueleTech
I wouldn’t immediately change everything.
First I’d understand why each one is public and what depends on that access.
Secure the environment, but understand it first.
#CloudInfrastructure #EmmanueleTech
I wouldn’t immediately change everything.
First I’d understand why each one is public and what depends on that access.
Secure the environment, but understand it first.
#CloudInfrastructure #EmmanueleTech
I prefer thinking about security before deployment.
Who needs access?
What needs to be public?
Which ports are actually required?
Security works better when it is part of the design.
#CloudSecurity #EmmanueleTech
I prefer thinking about security before deployment.
Who needs access?
What needs to be public?
Which ports are actually required?
Security works better when it is part of the design.
#CloudSecurity #EmmanueleTech
Servers are healthy.
But users cannot complete an important action.
I wouldn’t ignore the users because the metrics look normal.
A healthy server doesn’t always mean a healthy service.
#CloudOperations #EmmanueleTech
Servers are healthy.
But users cannot complete an important action.
I wouldn’t ignore the users because the metrics look normal.
A healthy server doesn’t always mean a healthy service.
#CloudOperations #EmmanueleTech
I like building a timeline.
What happened first?
What changed next?
That sequence can tell you more than one error message.
#Troubleshooting #EmmanueleTech
I like building a timeline.
What happened first?
What changed next?
That sequence can tell you more than one error message.
#Troubleshooting #EmmanueleTech
The infrastructure can look normal while users are still having problems.
I want to know what the system sees and what the user experiences.
#CloudOperations #EmmanueleTech
The infrastructure can look normal while users are still having problems.
I want to know what the system sees and what the user experiences.
#CloudOperations #EmmanueleTech
One works. The other behaves differently.
Before rebuilding anything, I’d compare their configurations and recent changes.
Sometimes the problem is configuration drift.
#CloudEngineering #EmmanueleTech
One works. The other behaves differently.
Before rebuilding anything, I’d compare their configurations and recent changes.
Sometimes the problem is configuration drift.
#CloudEngineering #EmmanueleTech
Every additional component has to be configured, secured, monitored and maintained.
I prefer adding complexity when it solves a real problem.
#CloudInfrastructure #EmmanueleTech
Every additional component has to be configured, secured, monitored and maintained.
I prefer adding complexity when it solves a real problem.
#CloudInfrastructure #EmmanueleTech
One is much more complex than the other.
Would complexity influence your choice?
For me, it needs to solve a real problem.
#CloudEngineering #EmmanueleTech
One is much more complex than the other.
Would complexity influence your choice?
For me, it needs to solve a real problem.
#CloudEngineering #EmmanueleTech
Consistency matters.
When you know what the configuration should be, troubleshooting becomes much easier.
#CloudInfrastructure #EmmanueleTech
Consistency matters.
When you know what the configuration should be, troubleshooting becomes much easier.
#CloudInfrastructure #EmmanueleTech
When a task becomes repetitive and predictable, automation starts making sense.
The goal is consistency, not automation for its own sake.
#Automation #EmmanueleTech
When a task becomes repetitive and predictable, automation starts making sense.
The goal is consistency, not automation for its own sake.
#Automation #EmmanueleTech
What happens if this component disappears?
Reliability starts with accepting that things can fail and designing around the failures that matter.
#CloudInfrastructure #EmmanueleTech
What happens if this component disappears?
Reliability starts with accepting that things can fail and designing around the failures that matter.
#CloudInfrastructure #EmmanueleTech
I wouldn’t immediately restart the web server.
I’d follow the request and check what happens between the application and its dependencies.
Where would you start?
#Troubleshooting #EmmanueleTech
I wouldn’t immediately restart the web server.
I’d follow the request and check what happens between the application and its dependencies.
Where would you start?
#Troubleshooting #EmmanueleTech
When something fails, I like following the request through its dependencies until I find where it stops.
#Troubleshooting #EmmanueleTech
When something fails, I like following the request through its dependencies until I find where it stops.
#Troubleshooting #EmmanueleTech
Multiple Availability Zones + Load Balancing + Auto Scaling can help eliminate single points of failure.
Design for failure. Build for availability.
#AWS #CloudComputing #EmmanueleTech
Multiple Availability Zones + Load Balancing + Auto Scaling can help eliminate single points of failure.
Design for failure. Build for availability.
#AWS #CloudComputing #EmmanueleTech
Application stopped working?
Don't immediately reboot the server.
Check the service, logs, disk, memory and processes first:
"systemctl status"
"journalctl"
"df -h"
"free -h"
"top"
Troubleshoot before you restart.
#Linux #EmmanueleTech
Application stopped working?
Don't immediately reboot the server.
Check the service, logs, disk, memory and processes first:
"systemctl status"
"journalctl"
"df -h"
"free -h"
"top"
Troubleshoot before you restart.
#Linux #EmmanueleTech