Rosemary Wang

Commiting to the journey of running in the cloud is quite as simple as moving your code or writing a new application on a cloud offering. Between a diverse service catalog, greater developer autonomy, rapid provisioning, surprise billing, and changing security requirements, you might find that hosting applications on the cloud does not make the most of the cloud. In this episode of the podcast, Rosemary Wang talks about the patterns and practices that help you move from cloud-hosted to cloud-native architecture and maximize the benefit and use of the cloud. The discussion covers essential application and infrastructure considerations, as well as cost and security concerns you need to think about when approaching a cloud-native architecture. Read a transcript of this interview: https://bit.ly/3LQKzY2 Subscribe to the Software Architects’ Newsletter [monthly]: www.infoq.com/software-architect…mpaign=architectnl Upcoming Events: QCon New York qconnewyork.com/?utm_source=sound…tm_campaign=qny23 June 13-15, 2023 QCon San Francisco: qconsf.com/?utm_source=soundcl…&utm_campaign=qsf23 Oct 2-6, 2023 Follow InfoQ: - Mastodon: techhub.social/@infoq - Twitter: twitter.com/InfoQ - LinkedIn: www.linkedin.com/company/infoq - Facebook: bit.ly/2jmlyG8 - Instagram: @infoqdotcom - Youtube: www.youtube.com/infoq Write for InfoQ - Join a community of experts. - Increase your visibility. - Grow your career. www.infoq.com/write-for-infoq/?u…aign=writeforinfoq

Guest Rosemary Wang, Developer Advocate at HashiCorp, discusses using Terraform for security automation, applying security best practices, and the relationship between Terraform and policy as code. Tips for getting started and recommendations for enhancing security journey with Terraform are also shared.

Rosemary Wang and Steve Almy from HashiCorp discuss the importance of proper secrets management in modern IT systems, highlighting the risks of unorganized secrets and emphasizing the benefits of centralized systems. They explore the challenges of transitioning to a centralized secrets management system like Vault, stressing the need for gradual integration and team education.