life's a blog, shine you star

Over the Last Decade Introduction Over the last ten years, the landscape of public cloud providers such as AWS, Google Cloud, and Microsoft Azure has dramatically transformed. Companies of all sizes have migrated to the cloud to leverage its scalability, flexibility, and cost-effectiveness. Alongside this migration, security controls have evolved to address new challenges. This blog will explore how customer progression and maturity have developed in areas like cloud IAM entitlement management, workloads (Kubernetes, serverless, containers), and public-facing applications. We will also highlight example solutions, particularly focusing on Check Point's CloudGuard products. Evolution of Cloud IAM Entitlement Management Identity and Access Management (IAM) is critical for securing cloud environments. Over the past decade, the complexity and granularity of IAM controls have significantly improved. Early Stages Initially, IAM was basic, often limited to simple role-based access control...

Is the Firewall dead? Depends on what you define as alive and well which  can look quite different based on many factors, but let's not get lost in semantics, and instead consider common reoccurring attempts at transformation and maturity around adoption and progression.  Full disclosure, these are my personal opinions, views, etc. If your platform cannot support what most folks refer to as the infrastructure of yesterday (which is a large majority of organizations today) mixing up public and private data centers with a range of workload types such as virtual machines, and microservices. That's a problem. Today, we see an accelerated adoption for Serverless Kubernetes, and with Organizations looking to Infrastructure as Code deployment as the end all be all to automating the entire puzzle and not just a piece here and there. Many of us are not yet there or even close, but it's coming. Not as quickly as I had imagined a few years ago, but nonetheless, it's prevalent toda...