On this Featured Guest episode of Screaming in the Cloud, Corey is joined by Sandy Bird, Co-Founder and CTO of Sonrai Security. The two discuss the current state of cloud permissions security, and Sandy details the company’s breakthrough Cloud Permissions Firewall which promises fast and scalable cloud least privilege all with one click. Corey and Sandy also talk about bunk AWS tools in this space, the insanely high “zombie” population in the cloud, and how Sonrai works for companies of all sizes.

Highlights:

(00:00) Welcome to Screaming in the Cloud with Corey Quinn

(00:50) Sponsored Ad

(01:32) Exploring Sonrai Security's Mission and Challenges

(03:38) Introducing the Cloud Permissions Firewall Concept

(05:59) Comparing Cloud Providers' Permissions Models

(09:49) Sponsored Ad

(10:12) Addressing the Zombie Identity Problem

(16:44) Scaling Solutions for Different Company Sizes

(20:10) Navigating Cloud Security Challenges

(23:38) Innovative Approaches to Permission Management

(25:27) Optimizing Permission Requests with Statistics

(27:04) Improving Cloud Security with Permissions on Demand

(35:15) Concluding Thoughts and Contact

About Sandy: 

Sandy Bird is the co-founder and CTO of Sonrai Security, helping enterprises protect their data by securing cloud identities and access. Sandy was the co-founder and CTO of Q1 Labs, which was acquired by IBM in 2011. At IBM, Sandy became the CTO for the global security business and worked closely with research, development, marketing and sales to develop new and innovative solutions to help the IBM Security business grow to ~$2B in annual revenue. He is a trusted and experienced cloud security expert.

Links referenced: 

Sonrai Security Website:  https://sonrai.co/screaming-cloud 

Free 14-Day Trial:  https://sonrai.co/screaming-trial

Sandy’s LinkedIn: https://www.linkedin.com/in/sandy-bird-835b5576/

* Sponsor 

Sonrai Security: https://sonrai.co/screaming-cloud 

In this episode of Screaming In The Cloud, we're joined by Nancy Wang, Venture Partner at Felicis Ventures, who discusses her exciting career shift from AWS to venture capital. Nancy shares the role of a venture partner and her focus on investing in infrastructure, platforms, and security from an operational perspective. Corey and Nancy talk about primary investment and the impact of market trend cycles on venture capital. Nancy’s work with the U.S. State Department is also highlighted in this episode, which promotes global entrepreneurship, especially for women in challenging environments.

Show Highlights 

(00:00) - Introduction 

(02:00) - What a venture partner does 

(03:42) - Nancy shares how she differentiates herself in her role and experience 

(07:07) - Insights on selecting companies to invest In 

(09:18) - The differences between working at Amazon vs. the VC and startup world

(12:09) - Investing in infrastructure and security startups

(17:09) - The balance between supporting established services and investing In new  

(19:18) - Exploring how different sectors influence venture capital investments 

(23:50) - AI and current investment trends in shaping venture capital decisions

(26:06) - Timing of investments, and the concept of 'entry points' for success

(27:22) - Nancy shares her work with the state department 

(30:44) - Closing thoughts and where to find Nancy 

About Nancy: 

Nancy is a product & engineering executive, advisor, and investor with significant experience in cloud computing, cybersecurity, and SaaS. Nancy advises Fortune 10 companies on accelerating revenue growth, and she advises startups on attracting their first 100K enterprise customers. She is a Venture Partner with Felicis Ventures, where she invests in early-stage startups in cybersecurity, enterprise infrastructure, and B2B SaaS. Previously, Nancy was the Director of Product & Engineering and General Manager at Amazon Web Services, where she leads P&L, product, engineering, and design for its data protection and security businesses - and currently serves as the technical advisor to Commvault (NASDAQ: CVLT) on its Cyber Resilience Council. Prior to Amazon, she led SaaS product development at Rubrik, the fastest-growing enterprise software unicorn, and built healthdata.gov for the U.S. Department of Health and Human Services. Excited to advance more women into technical roles, Nancy is the founder & board chair of Advancing Women in Tech, a global 501(c)(3) nonprofit that has already informed and educated 35,000 Coursera learners worldwide on how to get their first, or next, tech leadership role and partners with the U.S. State Department.

Links referenced: 

• Nancy’s LinkedIn: https://www.linkedin.com/in/wangnancy/
• Felicis Venture’s Website: https://www.felicis.com/

Sponsor:

• Panoptica Academy: https://panoptica.app/lastweekinaws

This episode features Anil Dash, VP of Developer Experience at Fastly, who returns to the podcast to share the integration of Glitch within Fastly post-acquisition. Anil shares how Glitch has continued flourishing under Fastly's umbrella, highlighting both platforms’ seamless acquisition and mutual growth. Anil shares the technical and cultural collaboration that has allowed Glitch to maintain its identity and mission while contributing to Fastly's broader goals. The episode highlights the power of community in tech, the importance of maintaining core values in mergers and acquisitions, and the advancements both Glitch and Fastly are making in the developer space.

Show Highlights: 

(00:00) - Introduction. 

(01:59) - Glitch's role within Fastly's infrastructure and services.

(02:16) - Comparison of AWS and Glitch’s approach to community building.

(05:40) - Anil’s ongoing enthusiasm for Glitch beyond typical post-acquisition experiences.

(08:53) - Fastly’s unique capabilities and impact on the internet. 

(14:35) - Fastly’s technical infrastructure and its performance advantages.

(20:42) - WebAssembly’s implementation and significance at Fastly.

(23:59) - Comparison of Glitch and Fastly’s developer engagement and pricing models

(25:18) - Ethical responsibilities and building a healthy tech ecosystem are important.

(27:50) - Importance of creating lasting and sustainable technologies.

(30:24) - Anil discusses Fastly's work culture and its influence on employee innovation and engagement.

(34:26) - Anil discusses Glitch's thriving post-acquisition integration into Fastly.

(38:26) - The critical role of Fastly's infrastructure in supporting major open-source platforms and decentralized networks.

(39:26) - Closing remarks and where to find more about Anil’s work.

About Anil: 

Anil Dash is the vice president of developer experience at Fastly, where he leads the team behind Glitch, the friendly developer community where coders have collaborated to create and share millions of web apps. Anil advises startups and nonprofits, including Medium and the Lower East Side Girls Club. An accomplished writer and artist, Dash has contributed to Wired and The Atlantic and collaborated with Lin-Manuel Miranda on one of the most popular Spotify playlists in 2018.

Links referenced: 

Anil’s Personal Website: https://www.anildash.com/

Glitch’s website: https://preview.glitch.com/

Sponsor:

Panoptica Academy: https://panoptica.app/lastweekinaws

This episode of Screaming in the Cloud focuses on keeping critical data safe and organized, especially when there's a lot of it. Pranava Adduri, the CEO of Bedrock Security, shares the tools and methods Bedrock uses to help other businesses protect their essential information. They discuss how new technologies like AI can help manage vast amounts of data and ensure only the right people can access it.

About Pranava:

Pranava has worked in data protection and security for more than a decade. Before becoming an Entrepreneur In Residence at Greylock Partners in 2020, he was a Software Development Manager for AWS, where he worked with Fortune 500 CISOs to develop innovative products for data risk and compliance. Before that, he was a founding engineer at Rubrik, a SaaS data protection platform. Pranava graduated magna cum laude from the University of California, Berkeley with a triple-major B.S. in Computer Science, Industrial Engineering and Operations Research, and Economics, then obtained an M.S. from Berkeley in Industrial Engineering and Operations Research. 

Show highlights:

(00:00) - Introduction 

(01:36) - Overview of Bedrock Security's solutions for large-scale data protection

(03:04) - The importance of data classification and access control was discussed

(04:47) - Exploring the limitations of current data governance 

(05:22) - Pranava details how data is managed in cloud environments

(09:39) - Evolving strategies in data lake management and data volume growth

(12:36) - Impact of generative AI on data creation and the need for retention

(15:50) - Discussion on cost-effective data management solutions

(23:45) - The role of AI in enhancing data security measures at Bedrock

(25:42) - How customer feedback shapes Bedrock’s AI security technology

(27:19) - The growing necessity for sophisticated data security systems

(29:22) - Upcoming events and where to find more about Bedrock Security and Pranava

Links: 

Bedrock Security: https://www.bedrock.security/ Bedrock Security X/Twitter: https://twitter.com/bedrocksecBedrock Security LinkedIn: https://www.linkedin.com/company/bedrocksec/Pranava’s LinkedIn: https://www.linkedin.com/in/padduri/Pranava’s Twitter: https://twitter.com/thenava?lang=enInnovation Sandbox 2024: https://www.businesswire.com/news/home/20240402284910/en/Bedrock-Security-Named-RSA-Conference-2024-Innovation-Sandbox-Finalist

SponsorPanoptica Academy: https://panoptica.app/lastweekinaws  

This episode of Screaming in the Cloud features Katie Reese, an experienced events producer at Tailscale, who walks us through the ins and outs of event marketing within the tech industry. Katie shares insights on effective swag management and event planning to create memorable experiences that drive product adoption. Additionally, Katie and Corey discuss the challenges and strategies of marketing in a post-pandemic, budget-conscious world and explore how remote-first companies have adapted to these changes.

Show Highlights: 

00:00 - Intro00:19 - Welcome Katie Reese, discussing life in sunny Mexico City and her work at Tailscale03:03 - How Tailscale's product-led growth feels like magic05:08 - Success stories from the Tailscale Up conference06:25 - Event strategies in the post-pandemic, budget-conscious era09:04 - The benefits of remote-first companies and changes in the event landscape10:36 - Katie's career journey and the value of networking at events14:34 - The thoughtful approach to swag and reducing event waste20:14 - How bad marketing can ruin customer interactions25:40 - Ensuring swag runs out at the right time at conferences28:10 - Discussion on ethical event practices and avoiding waste32:04 - Closing thoughts and where to find Katie online

About Katie:

Katie leads field events at Tailscale and, when she is not traveling, splits her time between small-town Tennessee and Mexico City because it's all about balance.

Links referenced: 

*Tailscale: https://tailscale.com/*Katie's LinkedIn: https://www.linkedin.com/in/katie-reese/*Katie’s Twitter: https://twitter.com/katiereese317?lang=en

Sponsor*Panoptica Academy: https://panoptica.app/lastweekinaws

In this episode, Corey chats with Google's Nick Eberts about how Kubernetes helps manage applications across different cloud environments. They cover the benefits and challenges of using Kubernetes, especially in Google's cloud (GKE), and discuss its role in making applications more flexible and scalable. The conversation also touches on how Kubernetes supports a multi-cloud approach, simplifies the deployment process, and can potentially save costs while avoiding being tied down to one cloud provider. They wrap up by talking about best practices in cloud infrastructure and the future of cloud-native technologies.

Show Highlights: 

(00:00) - Introduction to the episode

(03:28) - Google Cloud's approach to egress charges and its impact on Kubernetes

(04:33) - Data transfer costs and Kubernetes' verbose telemetry

(07:23) - The nature of Kubernetes and its relationship with cloud-native principles. 

(11:14) - Challenges Nick faced managing a Kubernetes cluster in a home lab setting

(13:25) - Simplifying Kubernetes with Google's Fleets

(17:34) - Introduction to GKE Fleets for managing Kubernetes clusters 

(20:39) - Building Kubernetes-like systems for complex application portfolios 

(24:06) - Internal company platforms and the utility of Kubernetes for CI/CD 

(27:49) - Challenges and strategies of updating old systems for today's cloud environment

(32:43) - The dividing line between Kubernetes and GKE from a product perspective. 

(35:07) - Where to find Nick 

(36:48) - Closing remarks 

About Nick:

Nick is an absolute geek who would prefer to spend his time building systems, but he has succumbed to capitalism and moved into product management at Google. For the last 20 years, he has worked as a systems engineer, solution architect, and outbound product manager. He is currently the product manager for GKE Fleets & Teams, focusing on multi-cluster capabilities that streamline GCP customers' experience while building platforms on GKE. 

Links referenced: 

• Duck Bill Group's website:http://www.duckbillgroup.com 
• Nick on Twitter/X : @nicholaseberts
• Nicholas Eberts on Instagram: https://www.instagram.com/neberts1/
• Nick on Linkedin: https://www.linkedin.com/in/nicholaseberts/

Sponsor

• Panoptica Academy: https://panoptica.app/lastweekinaws

Xe Iaso, the Senior Technophilosopher at Fly.io, joins Corey to explore the world of unconventional thinking in technology. They discuss the magic of embracing bad ideas as stepping stones to innovation, the simplicity and power of deploying applications globally with a single command, and the humorous yet insightful take on using old tech in new, imaginative ways. Along the way, they tackle the importance of clear communication in tech, the challenges and rewards of making technology accessible, and how to creatively navigate the tech industry's evolving landscape. Join us for an enlightening conversation that challenges the conventional path to tech success.

Show Highlights: 

(00:00) - Intro 

(02:08) - The ease of deploying apps across data centers with Fly.io 

(04:33) - From Python to Go, Xe shares their programming journey

(07:26) - Using S3 as a message queue for cross AZ data transfer

(10:57) - How unconventional ideas can lead to tech breakthroughs

(14:50) - The dangers of being too close to a product and the importance of a broader perspective 

(19:15) - The challenge of making complex tech accessible to newcomers

(23:40) - Voice Coding in tech

(28:33) - The pioneering tech developments driven by the adult entertainment industry

(31:22) - The ethical implications and personal impacts of AI in creative fields

(36:22) - Xe's multi-faceted approach to creativity and tech

 (38:55) - Closing remarks

About Xe Iaso

I'm Xe Iaso, a technical educator, twitch streamer, vtuber, and philosopher that focuses on ways to help make technology easier to understand and do cursed things in the process. I live in Ottawa with my husband and I do developer relations professionally. I am an avid writer for my blog xeiaso.net, where I have over 400 articles. I regularly experiment with new technologies and find ways to mash them up with old technologies for my own amusement.

Links referenced: 

• Fly.io: https://fly.io
• Xe Iaso's Blog: https://xeiaso.net  

Sponsor

• The Duckbill Group: https://www.duckbillgroup.com/ 

Corey sits down with Alyssa Miller, the CISO at Epic Global, for a discussion that cuts through the noise of the technology world in this episode of Screaming in The Cloud. Alyssa celebrates her personal journey to becoming a licensed pilot and invaluable insights into the current state and future of AI, cloud computing, and security. This episode ventures beyond the typical tech hype, offering a critical look at the realities of AI, the strategic considerations behind cloud computing at Epic Global, and the importance of explainability in AI within regulated industries. Additionally, Alyssa and Corey highlight the cyclical nature of tech hype, the misconceptions surrounding AI's capabilities, and the impact of startup culture on genuine innovation.

Show Highlights: (00:00) Introduction

(01:33) Corey celebrates Alyssa Miller getting her general aviation license.

(04:10) Considerations of cloud computing at Epic Global.

(06:45) The hype and reality of AI in today's tech landscape.

(11:49) Alyssa on the importance of explainability in AI within regulated industries.

(14:21) Debunking myths about AI surpassing human intelligence.

(19:30) The cyclical nature of tech hype, exemplified by blockchain and AI.

(24:58) Critique of startup culture and its influence on technology adoption.

(29:01) Alyssa and Corey discuss how tech trends often fail to meet their initial hype.

(31:57) Where to find Alyssa Miller online for more insights.

About Alyssa:

Alyssa directs the security strategy for S&P Global Ratings as Business Information Security Officer (BISO), connecting corporate security objectives to business initiatives. Additionally, she shares her message about evolving the way people think about and approach security, privacy and trust through speaking engagements at various conferences and other events. When not engaged in security research and advocacy, she is also an accomplished soccer referee, guitarist and photographer.

Links referenced: 

• Alyssa Miller’s LinkedIn Profile: https://www.linkedin.com/in/alyssam-infosec/
• Epic Global's Website: https://www.epiqglobal.com/en-us
• Alyssa’s Aviation Journey: https://www.linkedin.com/posts/alyssam-infosec_i-landed-at-ohare-kord-in-my-cherokee-activity-7079088781575811074-ZsSx?utm_source=share&utm_medium=member_desktop

This week on Screaming in the Cloud, Corey is joined by good friend and colleague, Charity Majors. Charity is the CTO and Co-founder of Honeycomb.io, the widely popular observability platform. Corey and Charity discuss the ins and outs of observability 1.0 vs. 2.0, why you should never underestimate the power of software to get worse over time, and the hidden costs of observability that could be plaguing your monthly bill right now. The pair also shares secrets on why speeches get better the more you give them and the basic role they hope AI plays in the future of computing. Check it out!

Show Highlights:

(00:00 - Reuniting with Charity Majors: A Warm Welcome

(03:47) - Navigating the Observability Landscape: From 1.0 to 2.0

(04:19) - The Evolution of Observability and Its Impact

(05:46) - The Technical and Cultural Shift to Observability 2.0

(10:34) - The Log Dilemma: Balancing Cost and Utility

(15:21) - The Cost Crisis in Observability

(22:39) - The Future of Observability and AI's Role

(26:41) - The Challenge of Modern Observability Tools

(29:05) - Simplifying Observability for the Modern Developer

(30:42) - Final Thoughts and Where to Find More

About Charity

Charity is an ops engineer and accidental startup founder at honeycomb.io. Before this she worked at Parse, Facebook, and Linden Lab on infrastructure and developer tools, and always seemed to wind up running the databases. She is the co-author of O'Reilly's Database Reliability Engineering, and loves free speech, free software, and single malt scotch.

Links:

• https://charity.wtf/
• Honeycomb Blog: https://www.honeycomb.io/blog
• Twitter: @mipsytipsy

On this week’s episode of Screaming in the Cloud, Corey is joined by Kristi Perreault. Given Kristi’s title of AWS Serverless Hero, Corey and Kristi discuss the origins and current state of the serverless world, the similarities between AI and serverless as the tech world moves into this next era, and why she emphasizes that serverless is not always the right solution for every issue. Kristi also opens up about her role as Principal Software Engineer at Liberty Mutual, and what she enjoys most about jet setting around the globe giving speeches.

Highlights:

(00:00) - Introducing Kristi Perreault

(00:39) - The Unconventional Path to Becoming an AWS Serverless Hero

(05:05) - Exploring the Boundaries of Cloud Education

(10:53) - The Challenges of Keeping Up with Rapid Tech Changes

(11:51) - Redefining Serverless: Beyond the Hype

(13:12) - The Evolution of Serverless and Its Impact

(21:55) - Staying Grounded Amidst Technological Zealotry

(27:18) - Python Development in the Cloud

(29:31) - Upcoming Talks and Where to Connect with Kristi

About Kristi

Kristi Perreault is an AWS Serverless Hero and a Principal Software Engineer at Liberty Mutual Insurance, where her focus is serverless-first cloud enablement. She has over 5 years of industry experience, holds an M.S. in Electrical & Computer Engineering, and is very passionate about promoting women in technology. She is an established speaker, appearing in over 35 conferences, podcasts, panels, and more. Kristi founded the Serverless Denver meetup, and currently co-organizes the Portsmouth, NH AWS User Group and CDK Day. Outside of work and the serverless tech space, Kristi can be found reading a good book in her tiny home, enjoying a good poke bowl, or jet setting all over the world.

Links:

• Linkedin: https://www.linkedin.com/in/kristi-perreault/
• Twitter: @kperreault95
• AWS Portsmouth User Group: https://www.meetup.com/aws-portsmouth-user-group/
• AWS Usergroup Belfast: https://www.meetup.com/aws-usergroup-belfast/