kbutler's experience to the counter has been mine at well. I moved to Big Company, Inc, and have been amazed at how smooth the "cloud" security conversations go

kbutler's experience to the counter has been mine at well. I moved to Big Company, Inc, and have been amazed at how smooth the "cloud" security conversations go to "on prem." One of the major factors seems to be standardization. Once security has blessed a cloud provider, they're blessing the infrastructure and features, so the blessing holds for most projects that might want to use it. In contrast to getting approval for a semi-custom config on-prem. Caveat: I'm not working with privileged data (gov or healthcare) anymore, so those considerations aren't influencing the behavior. Imagine HIPAA shops would be a lot more conservative.