Adrian here.

Unlike my business partners who have been logging thousands of air miles, speaking at conferences and with clients around the country, I have been at home. And with the mildest spring in Phoenix’s recored history, it’s been a blessing as we’re 45 days past the point we typically encounter 100 degree days. Bike rides. Hiking. Running. That is, when I get a chance to sneak outdoors and enjoy it. With our pivot there is _even more_ writing and research going on than normal, if that’s even possible. You will begin to see the results of this work within the next couple of weeks, and we are looking forward to putting a fresh face on the business. That launch will coincide with us posting lots more hands on advice for cloud security and migrations.

And as a heads up, I’m going to be talking Big Data security over at SC Magazine on the 20th. I’ll tweet out a link (follow at @AdrianLane) next week if you’re interested.

If you want to subscribe directly to the Friday Summary only list, just [click here](

## Top Posts for the Week

* [Salesforce to Piggyback on Amazon’s Growing Cloud](
* [Ex-VMWare CEO now EVP of GCP](
* [Insights on Container Security with Azure Container Service (ACS)](
* [Comparing IAAS providers](
* In ‘not cloud’ news, [Oracle accused of ‘improper accounting’ in attempt to pump-up cloud sales](
* [The Business Value of DevOps](

## Tool of the Week

“Server-less computing? What do you mean?” Rich and I were discussing cloud deployment options with one of the smartest engineering managers I know, and he was totally unaware server-less cloud computing architectures. If he was unaware of this capability, odds are lots of people are as well. So in this week’s ‘tool of the week’ section we will not discuss a single tool, but rather a functional paradigm offered by multiple cloud service vendors. What are they? Stealing from Google’s GCP page on the subject as they best capture the idea, essentially it’s a “lightweight, event-based, asynchronous solution that allows you to create small, single-purpose functions that respond to Cloud events without the need to manage a server or a runtime environment.” What Google did not mention is that these functions tend to be very fast, and you can run multiple copies in parallel to scale up capacity.

It’s really the embodiment of micro-services. You can, in fact, construct and entire application from these functions. For example, take a stream of data and run it through a series of functions to process it. It could be audio or image file processing, or real time event data inspection, data transformation, data enrichment, data comparisons or any combination you can think of. The best part? There is _no server_. There is no OS to set up. No CPU or disk capacity to specify. No configuration files. No network ports to manage. It’s simply a logical function running out there in the ‘ether’ of your public cloud.

Google’s version on GCP is called [cloud functions]( Amazon’s version on AWS is called (lambda functions]( Microsofts version on Azure is simply called [functions]( Check the API documents as they all work slightly differently, and some have specific storage requirements to act as endpoints, but the idea is the same. And the pricing for these services is pretty low; with lambda for example, the first million requests are free, and it’s 20 cents for every million requests thereafter.

This feature is one of the many reasons we tell companies to reconsider application architectures when moving to cloud services. We’ll post some tidbits on security for these services in future blog posts. For now, we recommend you check it out!

## Securosis Blog Posts this Week

* [Incident Response in the Cloud Age: In Action](
* [Understanding and Selecting RASP: Integration](
* [](
* [Incident Response in the Cloud Age: Addressing the Skills Gap](

## Training and Events

* We are running two classes at Black Hat USA:
* [Black Hat USA 2016 | Cloud Security Hands-On (CCSK-Plus)](
* [Black Hat USA 2016 | Advanced Cloud Security and Applied SecDevOps](