Ops in the serverless world: monitoring, logging, config management

Re:Ops in the serverless world: monitoring, logging, config ... by pryelluw on Sunday April 09, 2017 @12:21PM (#14072979)

What about audits in a serverless world? How do you approach that?

[ Parent | on HN ]

Re:Ops in the serverless world: monitoring, logging, config ... by Spivak on Sunday April 09, 2017 @09:16PM (#14075328)

Serious question. What are you auditing? You have access to all of your code and data and everything else seems like it would be up to your provider.

Wouldn't you know up front when you're choosing a stack whether they meet your compliance demands?

[ Parent | on HN ]

Re:Ops in the serverless world: monitoring, logging, config ... by dragonwriter on Sunday April 09, 2017 @09:56PM (#14075462)

> Wouldn't you know up front when you're choosing a stack whether they meet your compliance demands?

The number of actors in industries with particularly notable compliance requirements (like HIPAA) that have internally very weak, inaccurate, ideas of the actual requirements and who discover the pracctical meaning of key elements both long after they've been in force and long after they've relied on an inaccurate understanding is, well, non-negligible.

[ Parent | on HN ]

Re:Ops in the serverless world: monitoring, logging, config ... by MS_Buys_Upvotes on Sunday April 09, 2017 @09:49PM (#14075440)

> Wouldn't you know up front when you're choosing a stack whether they meet your compliance demands?

No, not always. Good luck with the refactor (complete rebuild?) when the time comes.

[ Parent | on HN ]

Re:Ops in the serverless world: monitoring, logging, config ... by toomuchtodo on Sunday April 09, 2017 @01:26PM (#14073320)

Audits and compliance aren't required at scale /s

[ Parent | on HN ]