Gov.uk Platform as a Service

Re:Gov.uk Platform as a Service by motohagiography on Thursday January 27, 2022 @09:17AM (#30100819)

Very cool. Worked adjacent to something similar in public sector. If you are doing this for a govt, may I recommend you include the following services:

- IAM Federation and brokerage service that takes arbitrary IDPs (every application is a simple document management problem at the tip of the iceberg, with a giant authN/AuthZ problem underneath. Consider authZ as a service as well)

- HSM/Vault for standard secrets management across applications

- Encrypted backup to data lake service, with cold storage option.

- vulnerability scanning and patch management (lines of business can't be trusted to do application patching)

- CI/CD pipeline service

- Jira/ADO or other "standard" project collaboration scheme

Managers don't usually know about this stuff, and they're the dealbreakers when you don't have them.

[ Parent | on HN ]

Re:Gov.uk Platform as a Service by inwit on Friday January 28, 2022 @05:33AM (#30112920)

just a little bit of scope creep there

[ Parent | on HN ]

Re:Gov.uk Platform as a Service by motohagiography on Friday January 28, 2022 @10:33PM (#30123514)

indeed, adding IAM is massive scope creep. I'd estimate anyone who understood that comment and didn't know it already saved about $100k in consulting fees and hundreds of hours of souding out why someones project is failing. These are the underlying issues.

[ Parent | on HN ]