Cloud and platforms
Cloud security is decided mostly by how platforms are built and run, and less by the tools bolted on afterwards. Shared responsibility still fails at the seams between what the provider secures and what the customer configures, and platform engineering is where those defaults get set.
New to this? The simple version
Field notes
- Shared responsibility still fails at the same seam
Cloud providers rarely get breached through their own platform. Their customers do, at the seam where the provider's controls end and the customer's settings begin: identity, configuration and data access.
Personal work and my own view, not my employer's. Sources are public.