Cloud support is a terrible job, and that’s a good thing for security
Of all the arguments that people make against moving their workloads to AWS or Azure, lack of control of vendor staff makes the least sense to me.
“The cloud isn’t secure because we don’t control the hiring or their people.”
I still have an involuntary eye twitch from the first time I heard this.
“They could hire literally anyone off the street and they could get access to our data.”
I think the reason it bugs me so much is that it is based on so many faulty assumptions — that your internal hiring practices are awesome, that your processes and controls are awesome, that you have as much control over your staff or environment or literally anything else in the world as you think you do.
It’s a comfort thing, but like a lot of comfort things, it’s based on premises that aren’t real.