Welcome to above the clouds

GCP – Google Cloud recommendations for investigating and responding to the Apache “Log4j 2” vulnerability (CVE-2021-44228)
In this post, we’ll provide recommendations from the Google Cybersecurity Action Team and discuss solutions available to Google Cloud customers and security teams to manage the risk of the Apache “Log4j 2” vulnerability (CVE-2021-44228). Please visit Google Cloud’s advisory page for the latest updates on our assessment of CVE-2021-44228, and the potential impact of the […]

AWS – Amazon Lookout for Vision now supports visual inspection of product defects at the edge
Amazon Lookout for Vision is excited to preview support for anomaly detection at the edge. Starting today, you can use your trained Amazon Lookout for Vision models on the edge by deploying these models to a hardware device of your choice. Your trained models can be deployed on any NVIDIA Jetson edge appliance or x86 compute […]

AWS – Amazon EMR now supports using multiple custom AMIs when you mix AWS Graviton2-based instances with non-Graviton2 instances in a single EMR cluster
Amazon EMR now supports using multiple custom Amazon Machine Images (AMI) when you mix Arm-based AWS Graviton2-based instances with non-Graviton2 based instances in a single cluster. This capability allows you to diversify across more instance types when using custom AMIs, helping improve your access to EC2 capacity for large clusters. Prior to this release, you […]

GCP – Google Cloud helps UK-based fintech Fluidly scale to 50,000 customers and beyond
Small businesses are the backbone of economies, and over the last four-plus years, UK-based startup Fluidly has built an industry-leading platform that helps small businesses and their accountants simplify their most critical accounting and cash flow work. Fluidly provides businesses intelligent cash flow management, which Hans Morris, a managing partner and early Fluidly investor at […]

GCP – Investigating the usage of GCP Service Accounts
Service accounts on Google Cloud are used when a workload needs to access resources or conduct actions without end-user involvement. There are multiple methods of authenticating using service accounts, including using service accounts as part of Google Compute Engine instances, impersonating service accounts, or using service accounts with a key file — an option which […]

GCP – Machine learning, Google Kubernetes Engine, and more: 10 free training offers to take advantage of before 2022
We’re continuing to offer learning opportunities at no charge to help you grow your Google Cloud skills. Here are ten training offers you can take advantage of before the end of this year to keep building your knowledge of machine learning, Google Kubernetes Engine (GKE), and more. Register here by January 10, 2022 to receive […]

GCP – Betting on Cloud SQL pays off for oddschecker
oddschecker is the UK’s largest sports odds comparison website. We collect bookmaker pricing of various sports teams, games, and best prices, in multiple territories, and present them to our customers in a collated view. This unique view benefits our customers because of the pricing difference between one bookmaker and another. In the UK, we work […]

GCP – Cloud Tasks: Now available in 23 GCP Regions
Over the last 3 years, Cloud Tasks, our fully-managed asynchronous execution control service, has been an essential part of production infrastructure for Google Cloud customers everywhere. Today we are thrilled to announce that you can now create Cloud Tasks queues in multiple GCP Regions around the world. At Google Cloud, we believe that if we […]

GCP – Google Cloud IDS signature updates to help detect CVE-2021-44228 Apache Log4j vulnerability
NIST has announced a recent vulnerability (CVE-2021-44228) in the Apache Log4jlibrary. To help with detection, Google Cloud IDS customers can now monitor and detect attempted exploits of CVE-2021-44228. Background The Apache Log4j utility is a commonly used component for logging requests. On December 9, 2021, a vulnerability was reported that could allow a system running […]
GCP – Google Cloud Armor WAF rule to help mitigate CVE-2021-44228 Apache Log4j vulnerability
NIST has announced a recent vulnerability (CVE-2021-44228) in the Apache Log4jlibrary. To help mitigate the effects of this vulnerability, Google Cloud Armor customers can now deploy a new preconfigured WAF rule that will help detect and, optionally, block attempted exploits of CVE-2021-44228. Background The Apache Log4j utility is a commonly used component for logging requests. […]