4 ms·
Are there software systems being developed (and which can be developed) where the engineers, server admins, dev ops etc have no access to the production data? I
by flakeoil 2y ago
Are there software systems being developed (and which can be developed) where the engineers, server admins, dev ops etc have no access to the production data? Is that possible to achieve? Do all data have to be encrypted for that to work? And how are the encryption/decryption keys handled and still allow the devs/admins to do what they need to do?
Right now it feels like most systems have an okay security level and authorization model for the end users and admin people in the office, but then behind the scenes, on the server, almost any random dev or consultant can access the raw production DB and do what ever they want.
- EE84M3i 2y agoIME most companies that take this seriously do have some kind of access to prod for debugging/etc but it is strictly monitored, time limited and requires approval. Often it also has contractual controls too. GCP offers a special paid product to provide customers more control over google employee access to your systems. It's called assured workloads https://cloud.google.com/security/products/assured-workloads?hl=en https://cloud.google.com/security/products/assured-workloads... Specifically the container.restrictNoncompliantDiagnosticDataAccess org policy is... Interesting.