Cloud veterans launch ConfigHub to fix ‘configuration hell’

Maybe we should consider, not letting everyone setup whatever the fuck they want, whenever the they want, however they want and assuming it's all good because, "it's in the cloud". And then that setup gets either dumped in IT's lap in it's half-assed state (if you're lucky) or is left running, long forgotten, until an attacker finds it and informs the organization about it's continued existence by spinning up a coin miner.

"The cloud" does need a lot of work on configuration management. But, that doesn't mean just another fancy tool to fix the fuckups. It means policies and procedures to make the broken configs harder to implement in the first place. But that doesn't have AI and flashy dashboards to wow the execs into spending more money. It just has users whining about waiting for an understaffed IT organization not getting things done "right now" for a project that has a deadline i tomorrow, which has been known about for three months.

10 comments

standards.xkcd
- I like this new file format.
We can't even standardize our environment names. The US team wants 'stage' and 'dev' but EU wants 'staging' and 'devel'.
- They’re both wrong, it’s “staging” and “dev”, duh
  
  Just do 3 letters for all: dev, uat, stg, prd, etc.
- I had "dev" and "notdev" once.
  
  PRD and PRD
  Because, as everyone knows. DEV is PRD and PRD is DEV.
Maybe we should consider, not letting everyone setup whatever the fuck they want, whenever the they want, however they want and assuming it's all good because, "it's in the cloud". And then that setup gets either dumped in IT's lap in it's half-assed state (if you're lucky) or is left running, long forgotten, until an attacker finds it and informs the organization about it's continued existence by spinning up a coin miner.
"The cloud" does need a lot of work on configuration management. But, that doesn't mean just another fancy tool to fix the fuckups. It means policies and procedures to make the broken configs harder to implement in the first place. But that doesn't have AI and flashy dashboards to wow the execs into spending more money. It just has users whining about waiting for an understaffed IT organization not getting things done "right now" for a project that has a deadline i tomorrow, which has been known about for three months.