Latest / Best of LinkedIn: Digital Transformation & Tech / Best of LinkedIn: Cloud Insights CW 13/ 14
Transcript
- 0:00Speaker 1: This episode is provided by Thomas Allgaier and Frennus based on the most relevant LinkedIn posts about cloud in calendar weeks, thirteen and fourteen.
- 0:09Speaker 1: Frenness has built a sovereign Cloud Market Radar for ICT providers with weekly hot news monthly reports quarterly leadership presentations an AI podcasts for field teams.
- 0:20Speaker 1: you can find more info.
- 0:23Speaker 1: Welcome to the deep dive everyone.
- 0:25Speaker 0: Yeah, really glad to be here We've got.
- 0:27Speaker 0: we've got a lot too unpacked for you
- 0:29Speaker 1: today sovereign cloud strategies, the operationalization of AI agents and finally FinOps industrialization.
- 0:57Speaker 0: It's a packed agenda but it all connects really beautifully?
- 1:01Speaker 0: It
- 1:01Speaker 1: does!
- 1:01Speaker 1: And I think before we can even talk about the flashy stuff like advanced AI or you know multi-cloud economics... We really have to look at how tech professionals are fundamentally rethinking cloud architecture and security.
- 1:14Speaker 1: Oh,
- 1:15Speaker 0: absolutely!
- 1:15Speaker 0: I mean there is a massive shift happening right now in how we even conceptualize the Cloud.
- 1:20Speaker 1: Right like For years, learning Azure or AWS was basically an exercise in rote memorization.
- 1:27Speaker 0: Yeah just flashcards of proprietary service names?
- 1:29Speaker 1: Exactly.
- 1:30Speaker 1: but we're seeing top architects aggressively pivot away from that like I was looking at an insight for Rajeeb Chanda and he argues that learning shouldn't be about memorizing services at all.
- 1:40Speaker 0: Right it's about the underlying mechanics.
- 1:42Speaker 1: yeah He calls understanding layers responsibility.
- 1:45Speaker 1: you know identity networking compute data Because if you don't grasp the fundamental physics of those layers, memorizing the exact brand name for a specific load balancer is totally useless.
- 1:57Speaker 0: It really is and Lefterskara Giorgio emphasized this same shift.
- 2:02Speaker 0: He had great posts pointing out that engineers struggle when they fixate on a vendor's specific implementation diagram
- 2:08Speaker 1: Instead of actual system behavior
- 2:10Speaker 0: Precisely Like, if you deeply understand a three-tier web architecture where your presentation application and database layers are isolated or how event driven microservices handle queues then the specific cloud services are just interchangeable parts.
- 2:28Speaker 1: Okay let's unpack this bit because it sounds to me like trying to build a house by just memorizing the names of tools at hardware
- 2:36Speaker 0: store.
- 2:37Speaker 0: That is great way.
- 2:37Speaker 0: put it
- 2:38Speaker 1: Right!
- 2:38Speaker 1: You might know what a hammer And maybe you know what it costs, but that doesn't mean you have any clue how the plumbing needs to route through a load bearing wall.
- 2:48Speaker 0: Exactly and honestly if you don't know How The Plumbing Connects To The Framing You Definitely Don't Know How To Secure The House.
- 2:54Speaker 1: Oh Man Yeah.
- 2:55Speaker 0: Which Is Why This Architectural Mindset is Completely Redefining Cloud Security.
- 3:00Speaker 0: Tymer Ejal Made A Brilliant Observation Recently About This.
- 3:03Speaker 1: What Did He Say?
- 3:04Speaker 0: He Pointed Out That Attackers Don'T Break Individual Services.
- 3:07Speaker 0: They Exploit The Pathways Between Them.
- 3:09Speaker 0: So security is really about how services connect and the attack paths those connections create.
- 3:15Speaker 1: Wait, hold on!
- 3:16Speaker 1: If attackers are exploiting pathways rather than individual services doesn't that mean our entire legacy approach to endpoint security kind of misaligned?
- 3:27Speaker 0: It's massively misalign.
- 3:28Speaker 0: I think most modern breaches happen because a series small seemingly okay configuration decisions across different layers
- 3:35Speaker 1: And they just chain together
- 3:37Speaker 0: they connect to create an unintended attack path.
- 3:40Speaker 0: Security isn't just about locking a single door anymore, it's about mapping how trust flows dynamically between you know thousands of microservices
- 3:49Speaker 1: which perfectly brings in this fascinating conceptual model.
- 3:52Speaker 1: I saw from Daniel Spangenberg oh the
- 3:53Speaker 0: time dimensions one yeah
- 3:55Speaker 1: exactly.
- 3:56Speaker 1: he argues that cloud security actually spans three distinct eras.
- 4:01Speaker 1: You have the past, the present and future.
- 4:03Speaker 0: It's such an effective way to diagnose security gaps.
- 4:06Speaker 0: like The Past is governed by CSPM tools Cloud Security Posture Management.
- 4:10Speaker 1: Right because they just scan the infrastructure To tell you what state your already in.
- 4:14Speaker 1: They look backward at misconfigurations that are already happened
- 4:17Speaker 0: Exactly.
- 4:18Speaker 0: And then the Present Is Your Sime Territory.
- 4:20Speaker 0: You know security information and event management.
- 4:23Speaker 1: But I mean, Simon struggles with modern architectures right?
- 4:26Speaker 1: Because in a microservices environment an event stream is basically just fire hose of noise.
- 4:31Speaker 0: Oh it's incredibly difficult!
- 4:33Speaker 0: Simon was trying to catch the thief while they're walking down the hallway which nearly impossible when millions legitimate automated events are happening at that exact same second
- 4:43Speaker 1: Right Which brings us into future.
- 4:45Speaker 0: Yes The Future Is Policy.
- 4:47Speaker 0: As Code You embed the security rules right into the deployment pipeline.
- 4:55Speaker 1: And I think the ultimate challenge for everyone listening right now is unifying those three time dimensions.
- 5:01Speaker 1: Unifying past, present and future.
- 5:03Speaker 1: so your teams aren't constantly switching mental models.
- 5:06Speaker 0: If you want to know just how urgent that unification problem is You'd have to look at market moves.
- 5:11Speaker 1: Oh!
- 5:11Speaker 1: You mean Google & Wiz thing?
- 5:13Speaker 0: Yeah I mean Google's thirty two billion dollar acquisition of wiz Is entirely about solving this architecture problems.
- 5:19Speaker 1: It's a massive number.
- 5:20Speaker 1: And Canna S and Jaco Silva did some great analysis on this.
- 5:24Speaker 1: They noted that Google isn't just buying another security tool, they're buying cut into cloud context
- 5:30Speaker 0: Right!
- 5:30Speaker 0: Their merging whizzes infrastructure mapping with their own AI threat intelligence Exactly...they
- 5:35Speaker 1: are trying to deliver A unified code-to-cloud run time protection layer.
- 5:41Speaker 1: The truly wild part is there aiming across AWS, Azure and GCP simultaneously.
- 5:47Speaker 0: It's a huge play for the Enterprise Foundation.
- 5:50Speaker 0: Yeah But you know IBM is executing a very similar strategy which Michael Morachnick and Catherine Wong pointed out recently.
- 5:57Speaker 0: Oh
- 5:57Speaker 1: with their recent acquisitions?
- 5:58Speaker 1: yeah
- 5:59Speaker 0: over The last eighteen months IBM has heavily integrated Hashi core for infrastructure automation Red Hat for hybrid cloud and Confluent for real-time data streaming.
- 6:08Speaker 0: They're basically assembling an AI-first enterprise stack for highly regulated environments.
- 6:14Speaker 1: But okay, if we are mapping out these attack paths and were securing the flow of data across all this interconnected environment eventually you hit a physical wall?
- 6:22Speaker 0: You do!
- 6:23Speaker 0: Geography
- 6:23Speaker 1: Right...you have to answer where does this data actually live And who legally has authority?
- 6:29Speaker 1: look at
- 6:30Speaker 0: it Which is exactly why Sovereign Cloud has evolved.
- 6:33Speaker 0: I mean its moved from each compliance topic into central strategic pillar for global enterprises.
- 6:40Speaker 1: Dr.
- 6:40Speaker 1: Sun Peterson actually had a great post about this philosophy, he noted that Sovereign Cloud is moving way beyond just checking a data residency box for an auditor.
- 6:49Speaker 1: Oh
- 6:50Speaker 0: especially in Europe.
- 6:51Speaker 1: Yeah!
- 6:51Speaker 1: For Europe it's literally becoming the path to strategic autonomy.
- 6:56Speaker 0: But you know we have to inject a reality check here which Nish Srebhavan provided recently, because organizations are demanding full sovereignty low cost and high speed all at once.
- 7:07Speaker 1: Which is impossible!
- 7:08Speaker 0: Totally impossible.
- 7:09Speaker 0: Sovereign Cloud has fundamentally about making hard choices and accepting trade-offs.
- 7:13Speaker 0: Wait
- 7:13Speaker 1: wait let me push back on that.
- 7:14Speaker 1: Aren't these hyperscalars promising us we can have it all?
- 7:17Speaker 1: Is Soveregn cloud just becoming a marketing buzzword totally ignores the friction of actual deployment.
- 7:22Speaker 0: That's exactly what Ann Leslie highlighted.
- 7:25Speaker 0: Her perspective on this is crucial.
- 7:28Speaker 0: She says Sovereign Cloud isn't a label.
- 7:30Speaker 0: It's an operating reality that only really gets tested when the system is under severe stress.
- 7:35Speaker 1: Under stress, how so?
- 7:37Speaker 0: Like it's not just about where the servers sit... ...it's about who retains decision authority when a geopolitical shift happens or when a massive operational incident occurs.
- 7:47Speaker 1: Oh!
- 7:47Speaker 1: That makes sense and Martin Merce echoed that deeply.
- 7:49Speaker 1: He pointed out that true sovereignty means understanding your dependencies actionable choices rather than just being locked into a proprietary stack.
- 8:00Speaker 0: And we are seeing the hyperscalers and ecosystem actively responding to this demand, like Oracle.
- 8:05Speaker 0: EU Sovereign Cloud hit their three-year milestone.
- 8:08Speaker 1: Yeah, Michele Hustings and Jason Rees shared some wild stats on that.
- 8:12Speaker 1: Their capacity grew by four hundred percent.
- 8:14Speaker 1: They're now supporting NVIDIA GPU shapes for AI directly in those environments
- 8:19Speaker 0: Which is huge for localized inference.
- 8:21Speaker 0: And then you have Microsoft making moves, too.
- 8:23Speaker 0: Douglas Phillips and Lisa Monaco highlighted how Microsoft and Armada are bringing sovereign AI to completely disconnected edge environments
- 8:32Speaker 1: using Azure local right
- 8:33Speaker 0: exactly so You can run a high-end highly regulated mobile settings with zero public internet connectivity.
- 8:40Speaker 1: But we also cannot ignore the European alternatives.
- 8:43Speaker 1: elk Andrew recently celebrated the ten year anniversary of T systems t cloud Public.
- 8:48Speaker 1: That's a true European sovereign alternative.
- 8:51Speaker 0: And Herod Jues mentioned the Neonephas Foundation, which is doing some incredible work building vendor-neutral open source sovereign cloud infrastructure.
- 8:59Speaker 1: Okay so let us take step back and look at what we have built in this conversation.
- 9:03Speaker 1: You've mapped the dependencies, locked down the architecture built a perfectly compliant sovereign fortress.
- 9:09Speaker 0: It's pretty secure right?
- 9:10Speaker 1: and then you deploy A fleet of autonomous AI agents inside it that absolutely break The entire governance model?
- 9:18Speaker 0: It's the ultimate irony isn't it?
- 9:20Speaker 0: we're moving so fast from experimental AI to production grade agentic workflows...the
- 9:25Speaker 1: speed Of deployment is just staggering.
- 9:28Speaker 1: Renato Ramon de Souza posted this incredible example.
- 9:32Speaker 1: He used Claude code to build a fully functional phenops expert agent inside co-pilot studio,
- 9:37Speaker 0: let me guess it didn't take him months?
- 9:39Speaker 1: It took them ten minutes, ten minutes to prove how fast external coding assistants are accelerating deployment.
- 9:45Speaker 0: Wow and you know Riaz Syod added really great point for IT probes here.
- 9:50Speaker 0: You don't need to build neural networks from scratch using complex calculus.
- 9:54Speaker 1: No not at
- 9:55Speaker 0: all.
- 9:55Speaker 0: You just need enough AI knowledge to deploy and secure models.
- 9:59Speaker 0: If you understand how to securely wire up AWS API Gateway, Lambda in bedrock... ...you are incredibly valuable right
- 10:05Speaker 0: now.".
- 10:07Speaker 1: But there's a serious governance crisis brewing here!
- 10:11Speaker 1: Tristan Ingold raised a huge warning flag about operationalizing these agents.
- 10:15Speaker 0: Yeah the IAM problem.
- 10:16Speaker 1: Exactly current identity and access management stacks were fundamentally built for humans in The Loop
- 10:21Speaker 0: Right.
- 10:22Speaker 0: They assume a biological human is typing a password or clicking the token, but AI agents authenticate up to one hundred and forty eight times more frequently than humans do.
- 10:31Speaker 0: One
- 10:31Speaker 1: hundred and fourty-eight times?
- 10:32Speaker 1: And they delegate!
- 10:33Speaker 1: Agent A spins up agent B to do a task.
- 10:36Speaker 1: so Tristan points out this creates a massive confused deputy liability.
- 10:41Speaker 0: Okay here's where it gets really interesting to me because basically what you're saying Is we are giving The corporate credit card To a fleet of hyperactive robot interns.
- 10:50Speaker 1: Yes
- 10:51Speaker 0: But we're still using human ID badges to track them.
- 10:54Speaker 0: How do we keep this from becoming an absolute disaster?
- 10:57Speaker 0: Well,
- 10:57Speaker 1: the ecosystem is starting to scramble for solutions... Per Gustafson shared some critical insights from Google Cloud's Gemini Enterprise events.
- 11:05Speaker 0: What is the strategy they're pushing?
- 11:06Speaker 1: He says, The solution requires an entirely new strategic blueprint.
- 11:10Speaker 1: We need fine ops for agents to manage token consumption.
- 11:14Speaker 1: we open standards prevent shadow agents and crucially agent-to-agent communication protocols.
- 11:20Speaker 0: They aren't just passing around static human centric tokens Exactly!
- 11:24Speaker 1: They need dynamically verify intent in scope
- 11:26Speaker 0: which seamlessly transitions us to our final theme.
- 11:29Speaker 0: Because speaking of phenops for agents and managing all this consumption, operating complex architectures in sovereign clouds with AI agents requires a massive evolution on how we track cloud
- 11:40Speaker 0: spend.".
- 11:41Speaker 1: We really have to industrialize Phenops!
- 11:43Speaker 1: Nicholas Fundrini introduced the brilliant concept that phenops must evolve from cost visibility to consumption intelligence.
- 11:53Speaker 1: I
- 11:53Speaker 0: love that distinction, because cost-visibility just explains the past.
- 11:56Speaker 0: you look at it dashboard and realize You blew your budget three weeks ago
- 12:00Speaker 1: right?
- 12:00Speaker 1: It does nothing to fix the present but consumption intelligence actually governs The present.
- 12:05Speaker 1: it embeds guardrails into the architecture
- 12:08Speaker 0: And Victor Garcia supported this strongly.
- 12:10Speaker 0: he noted that manual tagging is basically a slow death for phenops.
- 12:14Speaker 1: Oh chasing developers four tags via email
- 12:17Speaker 0: the worst.
- 12:17Speaker 0: The absolute worst, the goal has to be making cloud spend a hundred percent searchable and automated by
- 12:23Speaker 0: default.".
- 12:23Speaker 1: And we're seeing technical guardrails being released to solve these exact problems.
- 12:27Speaker 1: like Shotenaka shared that Snowflake just released new cost control parameters for Cortex-Can?
- 12:33Speaker 1: They added twenty four hour rolling credit consumption limits specifically to stop unexpected AI bills from bankrupting.
- 12:41Speaker 1: That's
- 12:41Speaker 0: essentially an emergency break for AI agents.
- 12:44Speaker 1: Exactly, and on the visibility side Pichimani Rajesh Kumar brought up a highly technical but incredibly impactful update from AWS.
- 12:53Speaker 0: Always saw this one.
- 12:54Speaker 0: S-three access logs right?
- 12:55Speaker 0: Yes
- 12:56Speaker 1: AWS S three server access logs now finally include a source region field,
- 13:00Speaker 0: which is huge.
- 13:01Speaker 0: I mean anyone who has dealt with cross-region data transfer costs knows it used to take hours of manual
- 13:07Speaker 1: correlation.
- 13:07Speaker 1: It was the nightmare.
- 13:08Speaker 1: and Now that one field eliminates all of that manual forensics
- 13:11Speaker 0: its pure consumption intelligence Yeah.
- 13:13Speaker 0: And we're seeing this visibility enhancement at the multi cloud level too.
- 13:17Speaker 0: Yuri Picard co announced Fokie S dashboard one point two.
- 13:21Speaker 0: Fokies
- 13:21Speaker 1: is the open billing standard, right?
- 13:24Speaker 0: And this dashboard automates multi cloud cost data consolidation.
- 13:27Speaker 0: so it brings AWS Azure and GCP building into a single pane of glass automatically.
- 13:32Speaker 0: no more manual normalization.
- 13:34Speaker 1: It's So cool how all these pieces fit together.
- 13:36Speaker 1: I mean we've gone from the architecture bedrock to sovereign borders to autonomous agents and finally, the fine ops layer that pays for it all.
- 13:46Speaker 1: It
- 13:46Speaker 0: really is an interconnected puzzle And you know I want to leave everyone listening with a final thought To mull over building on this entire discussion.
- 13:55Speaker 1: Lay it honest.
- 13:56Speaker 0: So we talked about cloud security needing to span three time dimensions past present in future.
- 14:02Speaker 0: We just discussed how AI agents authenticate hundreds of times faster than humans.
- 14:06Speaker 0: Right!
- 14:07Speaker 0: It raises a very important question For The Industry Are we rapidly approaching a threshold where human governance of the cloud is literally impossible without an AI governing it for us?
- 14:17Speaker 1: Oh, wow.
- 14:18Speaker 1: That's slightly terrifying but probably very accurate thought.
- 14:22Speaker 1: to end on if you enjoyed this episode new episodes drop every two weeks.
- 14:26Speaker 1: Also check out our other editions on ICT and tech digital products & services artificial intelligence sustainability in green ict defense Tech and health.
- 14:35Speaker 0: Thanks so much for joining The Conversation today.
- 14:37Speaker 1: Thank You!
- 14:37Speaker 1: And don't forget to subscribe.
- 14:38Speaker 1: Catch ya next time.