4 ms·
I am a big fan of Azure but MS's vendor lockin strategy has left a very bad taste in my mouth. Perhaps all cloud services are like this but my main beef with th
by _8j50 3y ago
I am a big fan of Azure but MS's vendor lockin strategy has left a very bad taste in my mouth. Perhaps all cloud services are like this but my main beef with them is they make it difficult and inrediblu costly to get security logs out of their platforms to somewhere else and what I've heard consultants who look at many customers' deployments say is the same thing, great product but hope you like vendor BDSM.
I partly get it, but the strategy of getting as many products as possible from one vendor is horrible these days, pick a different vendor just to force them to prioritize getting along with other vendors.
If you are a C-level exec, be cautious of this. Get at least 3 cloud providers and force people to use both so they can move around and save on costs. The more people do this, the less hostile these enormous cloud providers get.
- firesteelrain 3y agoI just use Splunk forwarders and indexers on Stack Hub. Log analytics on Azure Cloud. What issues are you having? I couldn’t get our security team to approve the use otherwise
- _8j50 3y agoNSG flow logs, storage container access logs and in general MS insisting on using graph api for logs, eventhub hasn't been better but all of it costs a lot in just egress and inter-regional data transfer costs, unless! You use their security products and sentinel!
- firesteelrain 3y agoThis is what I use for NSGs: https://learn.microsoft.com/en-us/azure/developer/terraform/create-network-watcher-nsg-flow-logs https://learn.microsoft.com/en-us/azure/developer/terraform/... But I do a lot at the Edge because I am required to as opposed to “Azure Proper” so I am my own MSP.
- _8j50 3y agoBeing subscription level is a big problem. Not just implementation complexity but cost.
- firesteelrain 3y agoStack Hub/Edge is also subscription based. It’s all in what you pay for. But all cloud services are ‘subscription based’
- _8j50 3y agoNo, I mean azure subscription, as in not tenant level.