News for hackers. Stuff that matters.

A comment on Why Everyone Builds Internal Kubernetes Platforms. Parent comment

Re:Why Everyone Builds Internal Kubernetes Platforms by Terretta on Wednesday October 14, 2020 @09:03PM (#24783619)
There’s paperwork compliance, and then there’s security and risk controls performance validated compliance.

It may be more difficult if “we signed a contrast, trust the compliance report” is not an acceptable answer for a particular risk management audit or regulator.

[ Parent | on HN ]
Re:Why Everyone Builds Internal Kubernetes Platforms by xenophonf on Friday October 16, 2020 @12:53PM (#24802620)
If we're in "we can't rely the 3PAO's assessment or the JAB's (or DISA's) review of this cloud vendor" territory, then we're probably dealing with workloads far more sensitive than FISMA High or Secret, in which case it absolutely makes sense to DIY.

But most workloads aren't that special.

[ Parent | on HN ]