Don't Give Developers Special Access - Balancing Access and Data Protection

 In today's episode, "Don't Give Special Access," we tackle a crucial question: how can we grant developers and operations engineers the necessary access to our applications without compromising customer data or violating business processes?

Clips

The Importance of Limiting Access: "Security best practices specify that engineers, both developers and IT operations, personnel, should have as little access as possible to the production application and its infrastructure."

Permission Escalation: "Permission escalation is a process of giving an on call engineer temporary increased system access during an emergency. This increased access typically comes with increased scrutiny."

Preventing Malicious Activities: "All of this ensures that a rogue engineer can't perform malicious activities on the site, including access customer private data inappropriately and cause damage to the system or the business."

"Balancing Security and Access: Giving engineers unrestricted access to everything... is just not safe and is just not good business practice."

----



Today on Modern Digital Business

Thank you for tuning in to Modern Digital Business. We typically release new episodes on Thursdays. We also occasionally release short-topic episodes on Tuesdays, which we call Tech Tapas Tuesdays.

If you enjoy what you hear, will you please leave a review on Apple Podcasts, Podchaser, or directly on our website at mdb.fm/reviews?

If you'd like to suggest a topic for an episode or you are interested in being a guest, please contact me directly by sending me a message at mdb.fm/contact.

And if you’d like to record a quick question or comment, click the microphone icon in the lower right-hand corner of our website. Your recording might be featured on a future episode!

To ensure you get every new episode when they become available, please subscribe from your favorite podcast player. If you want to learn more from me, then check out one of my books, courses, or articles by going to leeatchison.com.

Thank you for listening, and welcome to the modern world of the modern digital business!

Useful Links

• Architecting for Scale, 2nd Edition, O’Reilly Media

About Lee

Lee Atchison is a software architect, author, public speaker, and recognized thought leader on cloud computing and application modernization. His most recent book, Architecting for Scale (O’Reilly Media), is an essential resource for technical teams looking to maintain high availability and manage risk in...