Holiday Jam: Security




It was a remarkable, challenging and successful year. Throughout it we coped with challenges and reached new heights, doing our best to make Maestro solution advanced and effective with each release. And we are grateful that you shared our journey and warrant you that the new 2020 year will bring more joyful events, victories, and successes!
-------------------------------------------------------------------------------------------------------------------------

Security has been our main focus recently, that's why we decided to dedicate a post to the latest updates and the most interesting "newbies" in Maestro's tools collection. 

  • Permissions page allows managers or other users with administrative permissions to customize settings for users with a specified position, set up access to a tenant for a specified user, and review permission groups for a customer, in terms of self-service. The Permissions page contains three respective wizards which were implemented allowing to manage users' positions in tenants and permission groups.


  • Instance Expiration mechanism - It is now possible for the virtual instance owner to set an expiration period - the time after which the instance is to be stopped or terminated when it is not needed, to save costs. The option is available for each cloud provider supported by Maestro.
  • Qualys Cloud View Report - a new monthly Qualys Cloud View Report, aimed to describe the vulnerabilities detected on the account level in public clouds (AWS accounts, Azure subscriptions, Google Cloud projects). Qualys checks the accounts against a set of rules prepared and recommended by the Security team. All the vulnerabilities are collected into a monthly report, sent to the primary contacts.
  • Microsoft Azure Security Center Report - allows the Maestro application to provide recommendations on improving security on the subscription level using Azure Security Center service. Based on these recommendations Maestro will generate a monthly report on Azure tenants with recommendations on infrastructure improvements.


Comments

Post a Comment

Popular posts from this blog

Maestro Analytics: Essentials at the Fingertips

Image
Infrastructure analytics is one of the cornerstones for effective cloud management. Each cloud provider offers its own set of features and services for such purpose. We can say that AWS QuickSight, Google Data Studio, and Microsoft BI are among the top of the native analytics and BI offerings. They are deeply integrated into their native infrastructures, provide the detailed review of the infrastructure state, events and cost, and allow to take a deep dive into details, being powered by strong internal mechanisms and AI/ML engines. However, in many cases they provide a huge volume of data which needs a BI expert to cope with, as well as may have limited customization possibilities in terms of the covered data scope. Also, if you use more than one cloud, or have private datacenters, the fact that each of these tools is limited to its vendor, may be a reason for you to find a third-party analytics tool. Here is where you may consider solutions such as CloudHealth, AppOptics, or IBM C
Read more

Maestro: Greeting the Green Dragon

Image
The year is coming to the end, and it's high time for our traditional lookback on Maestro evolution, changes, and important events. The year of 2023 has been dynamic and full of updates, both technical and strategic.  We kept to our previous commitments , meanwhile adjusting to the new trends in Cloud and technologies in general.  We met our user's expectation and need for  cross-cloud FinOps, automated infrastructure analytics, security assessment and the "Fix it" button , aimed to simplify issues remediation. We also took into account the rising demand for  Open Stack-based resources, Cloud Native approaches,  AI/ML integrations .  As a result, we came up with our standard "six release per year" cycle, highlighted with the following milestones: Maestro Insights With the ML technologies growth, the amount of services offering infrastructure recommendations and analytics, grow. This is true for the public cloud providers' native services, as well as thir
Read more

Maestro Orchestrator: Product? SaaS? Framework!

Image
In 2012, EPAM Cloud Orchestrator was created as a cloud solution for the EPAM Systems community. It appeared when the issue of redesigning the growing infrastructure of more than 500 projects became critical. After a thorough analysis of the existing solutions, EPAM experts had to admit that none of them fit the company needs. However, that was not a problem but a challenge. If no perfect solution existed, EPAM created its own from scratch. In six years, EPAM Cloud Orchestrator evolved into a true hybrid cloud with over 8000 virtual machines in hundreds of projects. In addition to its basic function - hosting virtual resources - it supports a number of related components helping the users to be in full control of their virtual infrastructures, such as audit, monitoring, billing, reporting. Meanwhile, a time has come to go out of the box of an enterprise solution and meet the market. This is how the new generation of EPAM Cloud Orchestrator - Maestro was born. Maestro is
Read more