Create and Protect Admin Accounts
4850
Of your peers have already read this article.
1:30 Minutes
The most insightful time you'll spend today!
Setting up your new cloud infrastructure is scary. Extra scary when you realize that someone (is it gonna be you?) gets to have phenomenal cosmic power over the whole thing.
Yes, I’m talking about the admin account, and today we’ll dig into why they are important, dangerous and different.
When the team at pistach.io got their nuts-as-a-service business growing fruitfully, they knew they needed to think carefully about admin accounts. These people would have tremendous control over their use of Google Cloud, and they could potentially cause very big problems if any were compromised. Definitely resources that require a protective shell.
Early in pistach.io’s development, an employee named Walter Nutt wanted to play a prank by changing his co-worker’s profile photo from an almond to a peanut (pretty devious, since a peanut is actually a legume). He didn’t have access to his friend’s computer, but he did have access to the company’s Cloud Storage bucket. While searching for the profile photo in question, Wally inadvertently deleted the entire contents of the bucket!
As he searched for ways to restore its contents, Wally modified access to two other pistach.io buckets. The company was ground to a halt for a week while teams worked to crack through the permissions issues.
Time to rethink permissions a bit, so this couldn’t spoil their buttery smooth operations in the future.
Following the resource manager guide, the team made a super admin email address that wasn’t tied to a particular individual or Workspace account, and secured it with strong multi-factor authentication. This would be their backup in case an admin account were to be compromised, so they could recover and repair.
The team already uses Google Workspace, so they have an organization set up already. That creation process established initial super administrators, allowing them to create and modify all other resources inside the organization. As they looked toward using Google Cloud, the super administrators could:
- Give the admin role to people, for Cloud
- Act as a point of contact for account recovery
- Modify or delete the organization if needed
Making admin users for the organization allows other people to then flesh out the resources and policies for pistach.io, before they go nuts and give everyone all the permissions. While that would speed things up, it would make it easy for an attacker to crack through the security shell because any account compromise could give ousize access. Yikes!
Instead, the IT leads specified certain people to act as organization admins, and then gave them permissions to:
- Define Identity and Access Management policies
- Structure the Resource Hierarchy
- Delegate control of specific Cloud elements to others on the team
Once those organization admins were set up, they could give management and oversight of Compute, Storage, Networking and other resource types to the relevant leads, making sure each person had just the right amount of permission for the role they needed to perform. The organization admins don’t have permissions themselves to make these resources. They just delegate.
Now each person can accomplish the job they’re responsible for, but doesn’t have overly permissive access. Delegating like this keeps the entire organization safer, and limits the blast radius if someone does manage to break in.
You can go through these steps yourself with this tutorial.
By default the creation of an organization resource for the domain gives everyone the ability to create projects and billing accounts. Once they set up their Organization Admin at pistach.io they decided to remove some of these wide permissions and, in a nutshell, bring everything down to a much finer control. So people could get permissions for a folder or a project, but not the entire organization!
Remember to take care of your admin roles, as they have the power, and responsibility, to cause serious harm if not used safely. Be safe with your Identity and Access Management. And keep your data yours!
Next time we join you we’ll take a crack at creating and provisioning an app to run inside the policies and resource management frameworks created today.
5249
Of your peers have already downloaded this article
10:30 Minutes
The most insightful time you'll spend today!
The age of unthinking fears about cloud security is over. Not only is cloud adoption rising steadily across geographies, industries and job functions, but confidence in cloud security is rising as well — to the point where increased security is a major reason enterprises opt for cloud solutions.
Gone are the days when organizations accessed applications and infrastructure over the internet only because it was the least expensive way to scale compute, storage and networking resources as business needs changed. The cloud today is a strategic necessity, with increased agility, integration and speed (as well as security) being the prime drivers of its increased adoption.
This MIT SMR survey of security professionals studies trends in security, which workloads are seeing the highest cloud utilization, the steady growth of comfort with cloud security–and interestingly paints a picture of the executives who are holding out with regards to cloud security.
Download the report now!
IDC Survey: Why 95% of CEOs Have a Digital-first Strategy
2924
Of your peers have already read this article.
3:00 Minutes
The most insightful time you'll spend today!
When IDC recently asked CEOs what single word most reflects what their organization needs to thrive in 2022, the overwhelming response was “technology.” CEOs want to acquire greater digital know-how as they recognize that technology will underpin the business model of the future.
Digital transformation, already well underway, is becoming digital first.
In fact, an astonishing 95% of CEOs see the need to adopt a digital-first strategy, according to IDC, and the majority of organizations are down the path of executing their plans. Currently, they report that about 30% of their organization’s revenue comes from digital products, services and experiences, a figure that will reach past 40% by 2027.
But what will power this digital-first enterprise? Successful large-scale digital transformations are executed by a diverse set of partners and vendors—including a cloud partner, valuable channel partners and resellers, independent software vendors (commonly called ISVs), and services partners; multiple cloud partners are even becoming quite common.
These networks of experts are increasingly the driver behind enterprise transformation. They help companies and organizations to establish an actively managed and governed cloud ecosystem that integrates native and third-party solutions, which can create shared value for all partners from the latest digital technologies. In fact, 85% of CEOs told IDC that actively participating in digital ecosystems is important to their revenue growth.
The new digital agenda is built on cloud ecosystems
Recently, I sat down with the author of the IDC CEO survey, Philip Carter. He’s the group vice president, European chief analyst, and worldwide C-suite tech research lead at IDC, and I wanted to better understand from him how executives are approaching their digital-first mission.
He explained that CEOs are turning to cloud platforms as a primary partner to put in place new, industry-specific digital business models. These platforms are at the center of “industry value networks” that accelerate time to value and benefit from cloud architecture’s ability to deliver scale, extensibility, and AI-driven experiences to create new revenue streams.
At Google Cloud, we have made building such industry value networks a priority, comprising of:
- Google Cloud, which provides the infrastructure and develops industry-specific data and analytics capabilities using artificial intelligence.
- Broader Google product areas like Google Shopping, Ads, Maps, Pay, Assistant, Android and Chrome.
- Independent software vendors (ISVs) relevant to a specific industry, who co-innovate with Google to provide end-to-end solutions to industry problems.
- System integrators (SIs) with deep industry knowledge who build the strategy and implement the business transformation for customers.
As an example, Google Cloud customers across multiple industries are looking for digital transformation to reinvent their core functions, such as supply chain. They might be identifying new distribution channels or restructuring their inventory. Google Cloud understands how to link the enterprise ecosystem with the consumer ecosystem. We can help enterprises access this broader ecosystem while leveraging AI-driven insights from data to help inform decisions in real time, at the point of engagement.
Google Cloud’s partner ecosystem can help achieve multiple items on the C-suite tech agenda such as improving customer experience, powering enterprise intelligence, building trust, supporting a distributed workplace, driving innovation, and streamlining operations.
According to IDC, 75% of all organizations will be completely digitally transformed by 2030. Google Cloud has been working hard with our partners to create an extensive ecosystem that can help your organization achieve its digital transformation ahead of competitors. This includes co-developing and co-innovating industry-specific solutions with a host of partners in key areas such as operations, enterprise intelligence, customer experience, workplace productivity, innovation, security, and trust.
And over the next few years, Google Cloud will double its investment in its partner ecosystem with increased co-innovation resources, more incentives, and co-marketing campaigns and funding. We’ll also offer greater integration into the Google Cloud Marketplace and a larger commitment to training and enablement.
For more insights on the C-suite “Future of Enterprise” agenda, you can watch my full IDC interview. You might also download our ebook featuring IDC data on the future of enterprise with ecosystem examples from partners like AMD, Confluent, Fortinet, Genesys, Informatica, and Workspot.
Our goal is to provide comprehensive best-in-class support for our mutual customers’ digital transformations. As we look toward that goal, one thing is for sure: Our ecosystem of partners will continue to grow, adding solutions to meet the needs of digital-first enterprises. Care to join us on that journey?
Mrs. T’s Pierogies Moves SAP Systems to Google Cloud for Faster Analytics Capabilities for its SAP Data
6832
Of your peers have already read this article.
1:30 Minutes
The most insightful time you'll spend today!
Pierogies might just be the ultimate comfort food. But when Mrs. T’s Pierogies — the leading manufacturer of frozen pierogies in the US — learned it needed to transition its existing on-premises SAP ECC to S/4HANA, the company sought a little comfort for itself.
Founded in 1952, Mrs. T’s Pierogies now produces more than 650 million pierogies a year. Moving that many pierogies requires a powerful ERP system — and an equally powerful IT infrastructure on which to run it. Mrs. T’s realized that the SAP-mandated transition of its ERP solution to SAP S/4HANA was an opportunity to move its SAP systems to Google Cloud and gain real-time analytics capabilities for faster sales forecasting, more effective trade promotions, and more sophisticated planning.
From necessity to opportunity
Mrs. T’s successfully ran its SAP ECC solution on its own on-premises servers for years. But after SAP decided to sunset the product, Mrs. T’s realized that it faced multiple challenges, including:
- Migrating its SAP ECC 6.0 system from an on-premises leagcy OS to a cloud-based Linux environment
- Moving data from its SAP DB2 database to HANA
- Transitioning from ECC to SAP S/4HANA
That complex transition needed to take place with little or no downtime, since nearly all of the company’s invoices, warehouse movements, and transfer orders used the Electronic Data Interchange (EDI) protocol. Missing even a few hours of EDI transactions would put significant revenue at stake. Adding to the challenge: Some Mrs. T’s customers would not accept an invoice past five days, which left little room for error. Mrs. T’s chose Rackspace Technology, a longtime Google Cloud partner, to oversee the move.
Mrs. T’s could have chosen to run S/4HANA on its legacy hardware but saw migration to Google Cloud as an opportunity to improve key aspects of its business, in particular data analytics. Historically, sales planning and forecasting involved time-consuming manual processes. But the speed, availability, and scalability of Google Cloud meant that Mrs. T’s could take advantage of S/4HANA’s embedded analytics capabilities. Migrating could also open the door to leveraging Google Cloud’s native integration of SAP data to power Google tools such as BigQuery, Google Cloud AI Building Blocks, and more.
The move to Google Cloud also gave Mrs. T’s an opportunity to update its disaster recovery process. Previously, the company backed up to tape. So, if its SAP systems went down, a member of the IT department would have to drive the most recent tape backups an hour to its cold site, where the disaster recovery partner would load the SAP backup tape, boot the system up, switch network connections to that site, and cross their fingers. Not only would downtime be significant, but restored data would be limited to the periodic tape backup.
“Everything just worked”
Once Mrs. T’s decided to migrate to Google Cloud, the company worked with Rackspace Technology to implement the system. The first phase focused on moving the SAP production environment from on-premises infrastructure to Google Cloud and updating its database to HANA, which took place over 12 weeks. The switchover occurred over a weekend and was all but invisible to users. “We came in on Monday and everything just worked,” recalls Timothy Coyle, Director of Information Systems & Technology. In a second four-month phase, the company transitioned from ECC to S/4.
The move to Google Cloud paid dividends immediately. Batch transactions occurred twice as fast and on-screen end-user transactions rendered instantly. The upgrade also gave the finance team access to embedded analytics and monitoring for the first time. With everything now in the cloud, disaster recovery could be dynamic and nearly instantaneous, with a worst-case scenario of just 5 to 10 minutes of downtime.
“Mrs. T’s needed a skilled and experienced partner that could move its SAP environment to Google Cloud with no negative impacts to its business. We knew this migration was a key initiative in Mrs. T’s digital transformation journey,” says Chuck Britton, Google Partner Development Manager at Rackspace. “We also knew that running SAP on Google Cloud would give the business the fast and flexible analytical capabilities it needed for its SAP data.”
From ideation to production, Mrs. T’s migrated from its legacy on-premises infrastructure to a modern SAP S/4HANA solution on Google Cloud in only seven months, with minimal downtime and zero disruptions. Now that the migration is complete, Mrs. T’s has a flexible, highly scalable environment to run the SAP applications and data that fuel the business. Says Coyle, “Our strategic intent for IT is to make processes simpler, people more productive, and infrastructure more secure. This project fits right square in the middle of that strategic philosophy.”
Learn more about ways in which Google Cloud can transform your SAP experience and about Rackspace Google Cloud solutions for SAP customers.
Mambu’s Journey: Modernizing Core Banking with Google Cloud
924
Of your peers have already read this article.
3:30 Minutes
The most insightful time you'll spend today!
When our founders began Mambu in 2011, their goal was to bring the latest digital technologies to the banking and finance world. Banking, in particular, is an industry built on decades of deep legacy technology. So initially, Mambu was embraced by microfinance — 100 organizations in 26 countries in just the first two years.
Since then, acceptance of modernizing core banking services by using composable, cloud technologies has grown across financial services institutions (FSIs). We now service top-tier banks, fintech startups, and other finance organizations across six continents, helping them deliver flexible, personalized, customer-centric banking products and services that their customers can depend upon.
One of the main reasons we’ve been able to scale the Mambu composable banking platform across the globe and at our current pace is our partnership with Google Cloud. The decision to move forward with Google Cloud happened for several reasons.
1. Flexibility and openness. Many FSIs are on hybrid and multicloud technology stacks, as they may still be transitioning from legacy systems, or have data residency requirements that have led them to use different clouds in different regions. Mambu meets customers wherever they are in their cloud journeys. We support interoperability without vendor lock-in. This need for openness, as well as the scalability benefits, led Mambu to evolve our platform on Google Kubernetes Engine (GKE). Many customers use open-source Kubernetes because, this common foundation can help streamline integration, speed up time to market, and reduce development. Just as important, the Google Cloud open cloud approach matches our company values.
2. Security and data residency. For customers in highly regulated finance industries, security isn’t just top of mind, it’s the No. 1 requirement. In addition to Google Cloud’s secure infrastructure, external audit certifications, and encryption, its wide array of regions has allowed us to expand into more countries, where we serve banks that must meet local data residency requirements. For example, Google Cloud’s Jakarta Cloud Region, has allowed us to support Bank Jago in Indonesia as it brings more financial inclusion to the unbanked in that country.
3. Availability. It’s critical for banks to maintain basic financial functionality, like accepting deposits and serving cash, even amid a service disruption. We needed a cloud partner with impeccable redundancy, failover, and disaster recovery capabilities.
In addition to GKE, the Mambu platform uses several other Google Cloud services for specific functions, including Cloud Armor, Cloud Load Balancing, Cloud VPN, Cloud Memorystore, and Google Cloud Operations.
Another important reason we chose to partner with Google Cloud was its expansive ecosystem and commitment to innovation. We are midway into a three-year journey to modernize our own technology stack to meet customer needs.
Building a roadmap with Google Cloud
Our customers need a core banking technology platform that will grow with them as they bring to market innovative services built on the latest technology advances. For Mambu to be that platform, we need a cloud partner that supports and scales with our growth. While we originally built our cloud architecture on GKE and Compute Engine (among a few other Google Cloud services), we’re now looking to a serverless future where we can scale more easily and leverage managed services within Google Cloud and its partner ecosystem to focus on our core offerings.
These are just some of the modernization and customer-led innovations that we’re cooking up:
- More workloads in GKE: Like many companies, our cloud transformation is a work in progress. While much of our codebase is in GKE, we’re continuing to break up some larger pieces of code into microservices to increase agility and velocity, enabling us to make consistent updates to discrete areas of our platform without affecting the whole. GKE is the leader for orchestrating microservices at scale and continues to be a natural fit.
- Native BigQuery integration: Mambu customers collect a tremendous amount of data within the platform that can be used for analytics, personalization, and other use cases. We’re planning to create a seamless integration for feeding core banking data from Mambu into BigQuery so that customers can better leverage their valuable data.
- CloudSQL vs. self-managed MySQL: We have almost completed migrating from our own MySQL instances to managed Cloud SQL databases, which will open up new opportunities to implement customer-centric solutions such as BigQuery integration.
- A serverless future with Cloud Run: Compute Engine is working well for Mambu, providing the flexibility to choose the virtual machines that best balance performance and cost needs. As we seek even more time and cost efficiencies, we believe the elastic scalability of a serverless architecture built on Cloud Run will get us there, and we’re considering going serverless in the future. Doing so would abstract infrastructure for simpler management, while allowing us to fire up containers to meet our customers’ high transactions-per-second needs, spin them down when not needed, and pay only when they run. It would also boost security: Without long-running compute, there are no patches or fixes, and each new instance is isolated and fresh by default.
These are just a handful of examples of the ways we want to best leverage Google Cloud services to simplify how we manage our tech stack, as well as continue to bolster security, scalability, and performance. There are many other ideas we’re exploring: using Dataproc and Datastream to support the specific data needs of Islamic banking, Cloud Functions so that customers can run their own queries against Mambu, and AI-enabled features.
At Mambu, our mission is to empower our customers to deliver great modern financial experiences easily to everyone around the world. Every time Google Cloud opens a new data center, we can enter a new market. Every time we move to a new-to-us managed service via the Google Cloud Marketplace, we free up time to build new ways to deliver customer-centric banking solutions. And so, we look forward to continuing this partnership with Google Cloud well into the future.
Forrester Surveyed Indian Retailers About Digital Transformation. Here’s What They Found
DOWNLOAD WHITEPAPER3984
Of your peers have already downloaded this article
12:30 Minutes
The most insightful time you'll spend today!
As today’s empowered consumers demand more of the retail experience than ever before, leading retailers and brands in India are investing to rethink and reinvent in their customers’ cross-touchpoint experiences.
Our survey results demonstrate that retail decision makers understand that better customer experience can yield financial benefits, including faster revenue growth, and elevate the reach of influence and brand in the market.
Forty percent or more of retail executives are prioritizing revenue growth, improvement of customer experience (CX), and simplification of operations as the top priorities in their business agendas over the next year.
The survey also covers:
- Key Drivers For Retail Organizations To Migrate Application To Public Cloud
- Cloud Investments In The Retail Industry
- The Three Dimensions That The Industry’s Cloud Challenges Are Taking
- The Top Agendas Retailers Want to Accomplish with the Public Cloud
Download Forrester’s Retail Report Now.
More Relevant Stories for Your Company
Google Cloud’s High-performance Compute Speeds Up the Chip Design Process
Cloud offers a proven way to accelerate end-to-end chip design flows. In a previous blog, we demonstrated the inherent elasticity of the cloud, showcasing how front-end simulation workloads can scale with access to more compute resources. Another benefit of the cloud is access to a powerful, modern and global infrastructure. On-prem
Army Google Workspace is Now Operational and Live
Soldiers can now use their CAC cards to log into the service’s newly established Google Workspace account. With it, soldiers who don’t need the full spectrum of information-sharing provided by Army365 can nevertheless find comrades, schedule meetings and coordinate other activities. “All new entrants to the Army will be provisioned
How Google Classroom Helps State of Iowa Employees Serve the Public Better
Organizations are pressed with the need to engage, retain, and upskill employees with many positions staying fully or partially remote as the pandemic continues. The Center for Digital Government (CDG) reports that 74% of state and local governments believe they will continue hybrid operations for the long-term. This transition is
Google Cloud Leads the Pack in Cloud Security: Forrester Research
As organizations continue to move workloads to public clouds, security professionals must protect the sensitive data and digital identities found in those workloads. Once wary of cloud adoption, many security professionals now believe that the native security capabilities of large public cloud platforms actually offer more affordable and superior security
