test please delete

[eek]

At my Client, I'm having to explain to developers that they will get full admin rights over their VM's but they will only get read-only access into the Azure Portal so they can view all the resources for their product, etc. They're demaning 'full access' because that's what they're used to getting. They think they need that in order to turn VMs off and on again (a simple tweak grants that).

I've asked them if they have 'full access' to the data centre where their VMs currently reside, or do they just RDP/SSH onto the target device. When I ask what tasks they need to complete in the Azure Portal, I get:

WTF are they using VMs within Azure - the entire point of all the services Azure offer is to reduce the need for VMs and allow everything to be done (far more cheaply) on shared resources such as Azure Functions.....

[ladymuck]

that implies they weren't secure to start with doesn't it?

Not necessarily. Putting security measures in place before you fill it up is surely good practice?

[eek]

Not necessarily. Putting security measures in place before you fill it up is surely good practice?

Is it a Gremlin? If so don't use containers for overnight batch processes....

[ladymuck]

WTF are they using VMs within Azure - the entire point of all the services Azure offer is to reduce the need for VMs and allow everything to be done (far more cheaply) on shared resources such as Azure Functions.....

Don't go there. Just. Don't go there.

Although they are using some Azure native shared services as far as they can at the moment but it's mostly a lift and shift as no-one wants to do the redevelopment work.

The longer term thinking of moving the code out into functions etc just isn't there at the moment.

[ladymuck]

Is it a Gremlin? If so don't use containers for overnight batch processes....

Keep it dry, it'll be fine.

[NickFitz]

Morning denizens

Grey start but the sun's beginning to put in an appearance as the sky clears from the west

Up to 13°C so far after a mild night due to the cloud keeping the heat in, but not expected to get beyond 16°.

[vetran]

Not necessarily. Putting security measures in place before you fill it up is surely good practice?

Start as you intend to get moaned at for!

or

It is easier to not give, than to take away! - an ex colleagues observation about security rights.

[vetran]

Don't go there. Just. Don't go there.

Although they are using some Azure native shared services as far as they can at the moment but it's mostly a lift and shift as no-one wants to do the redevelopment work.

The longer term thinking of moving the code out into functions etc just isn't there at the moment.

Oh strange the infrastructure team are happy for me to do the redevelopment work so they can save a few quid. Not sure who is going to do the work I am supposed to do.

Azure - here we flounder!

[Scruff]

Keep it dry, it'll be fine.

Bright lights, bright lights...

[WTFH]

Not necessarily. Putting security measures in place before you fill it up is surely good practice?

Normally one of the bent bike frames will have a lock on it, just need to find the key in the pile of bodies.

It's environmental, you're recycling something (a lock) that would otherwise end up in landfill.