Keep an eye out for notices - AWS RDS Protection for Guardduty seems to have had some issues collecting logs.

Unclear how pervasive this was!

I've spent dozens of hours reading State of Cloud Security reports

You know, the ones that use data from their CSPM product

And I've realized the findings substantially reflect how well that tool helps customers secure their clouds

I wrote up some examples, both good and bad (🔗 in 🧵)

I've been chatting a lot re:when to make the first security hire" recently

I've come up with a Rule of Thumb:
Hire your first security person when security is an unavoidable distraction from scaling your business

ramimac.me/start-security

h/t @grims.bsky.social & @mag00.bsky.social

Use the handy-dandy power-interest grid to prioritize stakeholder management!

Speed reading @skamille.bsky.social & Ian Nowland's new book: Platform Engineering

Interesting tidbits in 🧵

paved roads 🛣️: “layers multiple offerings together into easy-to-use workflows”
vs
railways 🚟 building to fill a "meaningful gap that is not covered by any existing product”