Humans vs Code: Governance As Code

Human factors make governance as code a challenge – today we discuss why looking at things like audit and how we determine what has happened and respond to it in an automated way, may be a great first step to adding controls into a system.

We talk about a lot of human factors of what makes it hard to create a governance system, or what creates a biased system or an unevenly governed system.

We spent the first couple minutes of this podcast talking about our agenda, and those conversations spell out a lot of interesting topics that we will discuss. So hang in for those first couple of minutes, and then we will get straight to the governance.

Transcript: otter.ai/u/aqx5-wivDgPARqAXwXGCIm-bO5U
Image: www.pexels.com/photo/belgium-fla…-building-532864/

Governance As Code (pt 1 – identity)

Our discussion about governance as code today is one of a series that we’re going to be starting. In today’s episode, we started out discussing what is Governance as Code. Then we dug into identity and how important it is to know who is doing what in a governance process.

Special Guest: Kapil Thangavelu twitter.com/kapilvt

Along the way, we touch on topics such as Infrastructure as Code, trust, logging, and audit – all essential components for governance.

If this is your first time hearing about Governance as Code, you will learn a lot here. Even if you already know the topic, the back half of today’s podcast poses some fantastic conversations and questions.

Transcript: otter.ai/u/X5xXz3Gw0ot23jFsccZr_k9w-D4
Image: www.pexels.com/photo/gray-airpla…ol-panel-3402846/

Rob’s Hot Take:

In the May 9th Cloud 2030 discussion on “Governance as Code,” Rob Hirschfeld emphasizes the significance of building automation as code for creating resilient infrastructure. The conversation focuses on the challenge of tracking identity in automated systems to understand who initiated specific changes. Recognizing the importance of untangling transitions and identifying contributors becomes a foundational component of governance as code efforts. Join the insightful discussions at the2030.cloud and explore the in-depth May 9th episode of DevOps Lunch and Learn with Cloud 2030.

Everything As Code !

What makes Everything as Code and Infrastructure as Code interesting? In today’s episode, we discuss what makes something code-like and the idea of Everything as Code, based on Patrick Dubois’ article “In depth research and trends analyzed from 50+ different concepts as code.”

Reference: www.jedi.be/blog/2022/02/23/tre…0-as-code-concepts/

Some of our conclusions were practical, like if a concept is a process that is reproducible and auditable, that’s what makes it code-like. And some other possible conclusions were that it’s just marketing because it makes everything programmable. The reality is somewhere in the middle.

Transcript: otter.ai/u/E1TezO2XutwJyS-vCNetslwWO4A
Image: www.pexels.com/photo/man-in-grey…icky-note-879109/

Rob’s Hot Take:

In the Cloud 2030 Podcast episode on March 29th, Rob Hirschfeld provides insights on the “everything as code” discussion. While acknowledging the term’s playful exaggeration, Hirschfeld emphasizes the underlying desire for reproducibility, auditability, and code-like experiences in various aspects of operational and infrastructure activities. Despite the term’s potential for marketing hype, the aspiration to apply code principles to different facets of infrastructure management remains significant, influencing how we build and manage systems. To delve into this engaging discussion, check out the full episode on March 29th, available on the2030.cloud.