How to integrate Policy Intelligence recommendations into an IaC pipeline

The Good, the Bad and the Ugly in Cybersecurity – Week 43
October 25, 2019
How AdLoad macOS Malware Continues to Adapt & Evade
October 28, 2019
The Good, the Bad and the Ugly in Cybersecurity – Week 43
October 25, 2019
How AdLoad macOS Malware Continues to Adapt & Evade
October 28, 2019

It’s easy enough to review and apply these recommendations from within the Google Cloud Console. But what if you use Infrastructure as Code (IaC)? Treating your cloud infrastructure as code can make the administration, roll-out and upkeep of your environment more consistent and repeatable, and free your teams from having to troubleshoot snowflake environments that have a tendency to drift over time. If you do have IaC pipelines, you may need to manually review your IaC manifests to prevent infrastructure drifts, and also to ensure that they reflect the recommendations you may apply from within the Google Cloud console.

Further, as your Google Cloud footprint expands, relying on manual techniques alone to review and track recommendations is inefficient.

What if you could make Policy Intelligence recommenders and your IaC pipelines work together?

In a perfect world, you’d be able to use the recommendations that GCP surfaces with your repeatable IaC pipelines. Imagine if you could setup a serverless pipeline to track Policy Intelligence recommendations, automatically update your IaC manifests, generate pull requests for authorized teams to review and approve, and finally, roll them out with your CI/CD tool.

Leave a Reply

Your email address will not be published. Required fields are marked *