Welcome to Day Two Cloud. In this episode we take on the problem of over-provisioning access to resources. Sponsor strongDM joins the conversation to share how to properly manage roles and access in our IT systems, focusing heavily on the process of discovery. Who has access to what, and why do they have that access? Our guest from strongDM is Britt Crawford, Director of Product.

Today's Day Two Cloud podcast gets into Infrastructure as Code (IaC) and how to evaluate it so that IaC practices fit your organization, your processes, the infrastructure you're trying to support, and so on. Our guest lays out some guideposts to help you understand if IaC is working for you.

Sponsor and startup Augtera Networks joins Day Two Cloud to discuss Augtera's proactive network analysis and operations product, which is meant to make you aware of problems before they become…problems. Augtera brings together traditional network sources such as flows and SNMP, plus telemetry and metadata to provide actionable information across networks you own and networks you don't.

Today's Day Two Cloud sponsor Netris promises to deliver a cloud-like experience for running your physical network. Netris software lets you build a private cloud on premises, and integrates with Terraform and Kubernetes. Our guest is Alex Saroyan, Netris CEO and founder.

If you're a security or network professional wondering if your skills aren't as applicable or useful when it comes to public cloud, don't worry: they are very, very useful. On today's Day Two Cloud podcast we talk with Brandon Carroll on how to properly map traditional infrastructure and network security to public cloud deployments.

Today on Day Two Cloud we peel back the curtains on Google Cloud with a GCP insider to find out how Google Cloud differentiates itself, its embrace of a multi-cloud approach, and more. Our guest is Richard Seroter, Director of Outbound Product Management at Google Cloud. This is not a sponsored episode.

Today's Day Two Cloud digs into an Infrastructure as Code (IaC) platform called Pulumi. Pulumi can be used to build, deploy, and manage cloud applications using familiar languages such as .Net and Java, as well as well-known tools and practices.

Today's Day Two Cloud explores the Open Policy Agent (OPA), an open-source project that serves as a policy engine for cloud-native environments. According to the OPA Web site, you can use OPA to "enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more." Guest Anders Eknert walks through how it works, use cases, and more.

Today's Day Two Cloud explores the vastness of IPv6 and public cloud. IPv6 provides so much address space that you can use an address once for one connection and never use it again, and it isn't wasteful. The abundance of IPv6 may influence how you approach cloud applications and networks.

Today's Day Two Cloud gets into application security and working with developers to make sure code is sanitized and tested. Writing secure code at the outset can dramatically reduce risk and help simplify operations and security. Our guest is Tanya Janca, founder of We Hack Purple. We Hack Purple offers free training courses for people who want to get into security.