Cloud and security

The infrastructure the company’s systems run on is built and maintained as code: servers, networks, databases, access and backups. The development, staging and production environments match each other and can be rebuilt, audited and changed under control.

Each part of the system runs under its own identity with only the permissions it needs, passwords and keys are kept in a vault, and personal data is encrypted. Public-facing addresses have a web application firewall and request rate limits. Monitoring centralizes logs, alerts on budget, error loops and unusual permission changes, and contains the resource reversibly when the risk is critical.

It serves a company that set up its cloud piece by piece and cannot reproduce it, one that wants to control cost, and one that has to answer security questionnaires from its clients, with the documentation they ask for.