on clouds and testing

In general, how does migration to the cloud affect #security #testing efforts? Less testing for the the development team? Or more?

— Hannes Lindblom (@HannesLindblom) January 22, 2018

Good q on Twitter.

Assuming a public cloud with a mega provider, our focus evolves from learning how to build better to verifying functionality. The purpose morphs from educating our own devs to supporting trust in an external service offering "as is".

We will want assurance on how stuff works in "somebody else's computer" and we will need to focus on interfaces. In an ideal world, with perfect trust in the cloud provider, we might well end up with a smaller test budget. How do we spend it wisely?

My 2c.