
Hey there! I'm an SRE, not your average suit-and-tie techie.  Based in Seattle, I've spent 17+ years navigating the intricate world of BFSI tech. Think of me as a problem-solving ninja, wielding my expertise in production support, AWS, and cloud computing to tame even the most complex technical beasts. ⚔️

I'm not just all code and algorithms, though. I believe in leading by doing, collaborating seamlessly, and building strong relationships across the board.  Whether it's crafting innovative solutions or strategizing for efficiency, I'm passionate about making things tick and helping others do the same.

**So, why am I here?** Well, I love sharing my knowledge and experiences, and I hope this blog becomes a space for open discussions, valuable insights, and maybe even a few laughs along the way.  Stay tuned for tech talk, industry insights, and a peek into the life of an SRE who doesn't take himself too seriously.


Linkedin

SRE Manager

Uma Shankar Shanmugam


## Introduction
When considering the transition to cloud computing, myriad questions often arise. Is cloud hosting secure enough for sensitive customer data? Why is it advantageous for businesses to shift from a capital expenditure model to an operational one? What becomes of existing hardware in this transition? What is in it for the business?

The decision to embrace cloud solutions can indeed seem daunting, with numerous uncertainties looming. However, beyond the buzz surrounding cloud technology lies a wealth of benefits waiting to be tapped into. While the allure of the cloud may initially stem from its digital prominence, the ultimate driving force behind adoption invariably boils down to one critical factor: **cost efficiency**. In this article, we will address the questions above and shed light on why the cloud has emerged as a pivotal paradigm for modern businesses.

## Is Cloud Hosting Secure Enough for Sensitive Customer Data?
Cloud hosting can be secure for sensitive customer data, but it requires careful planning, implementation, and ongoing monitoring. Here are some factors to consider:

- **Encryption**: Ensure that data in transit and at rest is encrypted using strong encryption algorithms. Most reputable cloud providers offer encryption services for data storage and transmission.
- **Access Control**: Implement robust access controls to ensure that only authorized individuals can access sensitive data. This includes using strong authentication mechanisms, role-based access control, and regular review and updating of access privileges.
- **Compliance**: Verify that your cloud provider complies with relevant industry standards and regulations regarding data security and privacy. This may include standards like GDPR, HIPAA, or PCI DSS, depending on your industry and location.
- **Data Isolation**: Ensure that your data is logically isolated from other tenants on the cloud platform. This prevents unauthorized access and data leakage between different customers sharing the same infrastructure.
- **Regular Audits and Monitoring**: Conduct regular security audits and monitoring of your cloud environment to detect and respond to any potential security threats or breaches promptly.
- **Backup and Disaster Recovery**: Implement robust backup and disaster recovery procedures to ensure that sensitive data can be restored in the event of data loss or corruption.
- **Vendor Security**: Evaluate the security practices and track record of your cloud provider. Choose reputable providers with a strong focus on security and a history of successfully protecting customer data.
- **Data Residency and Jurisdiction**: Understand where your data is stored and the legal jurisdiction governing it. Some industries and regions have specific requirements regarding the storage and processing of sensitive data.

While cloud hosting can provide a high level of security, it's essential to remember that security is a shared responsibility between the cloud provider and the customer. By implementing best practices and staying vigilant, you can mitigate many security risks associated with hosting sensitive customer data in the cloud.

## Why Is It Advantageous for Businesses to Shift from a Capital Expenditure Model to an Operational One?
- **Cost Efficiency**: OpEx models allow businesses to pay for resources or services as they use them, rather than making large upfront investments. This can result in better cash flow management and lower initial expenses, as costs are spread out over time.
- **Scalability**: OpEx models are often more flexible and scalable than CapEx models. Businesses can easily adjust their resource usage up or down based on demand without incurring significant additional costs or being locked into fixed infrastructure investments.
- **Predictability**: OpEx models offer more predictable expenses, as costs are typically based on usage or subscription fees. This can make budgeting and financial planning more straightforward, as businesses can forecast expenses more accurately.
- **Access to Latest Technology**: With OpEx models, businesses can access the latest technology and services without having to invest in costly infrastructure upgrades or equipment purchases. This allows them to stay competitive and innovative in their respective industries.
- **Focus on Core Competencies**: By outsourcing certain functions or services through OpEx models, businesses can focus their resources and efforts on their core competencies and strategic objectives. This can lead to increased efficiency and competitiveness in the marketplace.
- **Reduced Risk**: OpEx models often involve outsourcing certain functions to third-party providers who specialize in those areas, reducing the business's exposure to risks such as technology obsolescence, maintenance costs, or regulatory compliance issues.

Overall, transitioning from a CapEx to an OpEx model can offer businesses greater flexibility, cost efficiency, and agility in today's rapidly changing business environment.

## What Becomes of Existing Hardware in This Transition?
During the transition from a capital expenditure (CapEx) model to an operational expenditure (OpEx) model, businesses may handle existing hardware in several ways:

- **Continued Use**: Depending on the condition and functionality of existing hardware, businesses may choose to continue using it until it reaches the end of its lifecycle. This allows them to maximize the return on their initial investment before transitioning to OpEx-based solutions.
- **Repurposing**: Some hardware components may be repurposed for alternative uses within the organization. For example, servers or networking equipment could be redeployed to support new projects or departments, extending their lifespan and reducing the need for additional investments.
- **Leasing or Renting**: Businesses may opt to lease or rent hardware on an OpEx basis instead of purchasing new equipment outright. This allows them to access the resources they need without the upfront costs associated with ownership, making it easier to align expenses with revenue.
- **Selling or Decommissioning**: In cases where hardware is no longer required or cost-effective to maintain, businesses may choose to sell it on the secondary market or decommission it responsibly. This can help recover some of the initial investment or reduce ongoing maintenance and support costs.
- **Migration to Cloud Services**: As part of the transition to an OpEx model, businesses may migrate some or all of their workload to cloud-based services. This could involve retiring on-premises hardware in favor of cloud infrastructure, software-as-a-service (SaaS) solutions, or platform-as-a-service (PaaS) offerings.
- **Hybrid Solutions**: Many businesses adopt hybrid IT environments that combine on-premises infrastructure with cloud-based services. In such cases, existing hardware may continue to play a role alongside cloud resources, providing a balance of flexibility, control, and cost-effectiveness.

Ultimately, the approach to handling existing hardware in the transition to an OpEx model will depend on factors such as the organization's specific needs, budget constraints, and strategic objectives. The goal is to optimize resource utilization, minimize costs, and align IT investments with business priorities in a dynamic and evolving landscape.


Overall, migrating to the cloud enables businesses to become more agile, cost-effective, and competitive in today's fast-paced digital landscape. By leveraging the benefits of cloud computing, organizations can drive innovation, improve collaboration, and deliver value to customers more efficiently.


This Blog describes the pros and cons of migrating to the cloud vs staying on local datacenters

Exploring Cloud Solutions: Navigating the Infrastructure Dilemma

Sustainable operations are essential for the long-term success of any organization. One important aspect of sustainable operations is the segregation of applications and infrastructure, with clear demarcations between the two. This helps operations teams to focus on the infrastructure, the "muscle" that powers the application.

One key tool that can help with sustainable operations is infrastructure as code. This allows operations teams to easily replicate environments multiple times, ensuring that all environments are up to par with the requirements of the engineering team.

To sustain this level of excellence, there are a few key things to keep in mind:

### Vigilance:
Never take anything for granted. Pay attention to the details and be on the lookout for potential issues.

### Read the documents: 
Make sure to read the documents released for every sprint. This will help you stay up to date with the latest changes and ensure that you are aware of any potential issues.

### Collaborate: 
Even if the recipient is not listening, make an effort to flag any potential problems and document them. This will help ensure that any issues are addressed before they become bigger problems.

### Do it right the first time:
Insist on doing things correctly the first time around. This will save time and resources in the long run.

### Be a customer advocate: 
Keep things simple for the customer by addressing their needs. This will help ensure that they are satisfied with the product or service they are receiving.

By following these guidelines, you can help ensure that your operations are sustainable and effective.


Sustainable Operations: The Key to Long-Term Success


As I navigated the landscape of my formative years in the early '90s, a fear of making mistakes was instilled in me. Each misstep in exams jeopardized my grades, and every error in life seemed to chip away at my character. The wisdom imparted by parents, teachers, the principal, and elders echoed a simple mantra – "Do the right thing, the first time."

Carrying this ethos into my professional life, I diligently adhered to the principle. The workplace exuded a sense of bliss as mistakes became a rarity. I infused my team with the same zeal, fostering a culture where "redo," "undo," "update," "error," and "mistakes" were treated with utmost seriousness.

However, as the sands of time trickled through the hourglass of my career, I observed a subtle shift. Mistakes were no longer anathema; they were acknowledged and accommodated, thanks to the advent of the "undo" button and a change in mindset.

Acknowledging that there are elements beyond our control, we began to reluctantly accept mistakes that shouldn't have occurred in the first place. An alarming realization dawned – processes were evolving to support and even anticipate errors, with quality assurance standing as a safety net. The onus of accountability shifted from individuals to the process itself, gradually culminating in the acceptance that "Mistakes will happen."

In the bygone era, thoughtful consideration preceded the release of notes. However, with the march of time and the digital revolution, the mantra shifted. Online tools introduced a paradigm shift – mistakes became acceptable, for now, they could be rectified with a simple update. Platforms like Twitter enforced a certain level of accountability, reminding users that their words held weight. Yet, the winds of change suggest that even this may evolve.

In the midst of this evolving landscape, it becomes imperative to pause and remind ourselves – while mistakes may happen, the true essence lies in making every possible effort to prevent them at the source. The echo of "Do the right thing, the first time" reverberates as a timeless guide.

Embracing mistakes is not about complacency; it's about recognizing the fluidity of life and work. It's a shift from fearing mistakes to understanding that they are part of the journey. The mantra remains – "Mistakes may happen, but every effort must be made to ensure they don't. Practice doing the right thing, the first time."

Welcome to the wonderful feeling of growth and resilience, where mistakes are not roadblocks but stepping stones to improvement. In the grand tapestry of life, each misstep adds a unique thread, weaving a story of continuous learning and progress.


Exploring a shift in mindset: accepting "mistakes happen," but emphasizing prevention and accountability. It calls for mindful action, seeking to "do the right thing, the first time," for a more fulfilling journey.

Embracing Mistakes: A Journey from Perfection to Growth


“I don’t know — maybe put a little less food on your plate.”

That was her advice. She was a doctor, for crying out loud.

She was my doctor, unfortunately.

Most of the physicians I’ve seen in my life made me feel like they didn’t care about me or my problems. They had sicker people to see, and I looked “normal.” They spoke quickly, interrupted me, and showed me the door. They were busy, and I wasn’t a priority.

On the hazy, overcast morning of my doctor’s appointment, rain fell silently from the sky. I remember it vividly because I live in Southern California, where it rarely rains, and the doctor was late for my appointment. No one can drive in the rain out here. But, I’ll tell you about that some other time.

She entered the room awkwardly and apologized for her tardiness, but she was unfriendly and cold. Perhaps she was embarrassed that she was late. Maybe she was dreading confirming my diagnosis. Either way, this appointment was about to go south.

I heard the air conditioner click on. She finally confirmed that my test results revealed that I was in menopause. Then she told me to lose weight.

I was 37 years old.

### The average age
The average age for menopause to start for American women is 51. I arrived there 14 years before I was supposed to.

I was pissed.

After my doctor told me to lose weight, she informed me that losing weight would be more challenging now because I was in menopause.

> I don’t know. You’re fine. See the front desk on your way out.
<cite>Every last one of them said that.</cite>

### I looked fine, so no biggie
Multiple symptoms ran parallel but felt unrelated at first.

> “Your body just really doesn’t want to have a period, I guess!” — Words of wisdom from one of my doctors

I stared blankly at her, wondering why she wasn’t doing more to help me, but I had no questions to ask. I didn’t know how to help myself. Was it really okay that I had four periods a year?

Sometimes I would get hot flashes followed by nausea. I would play this fun game with myself: Is this a hot flash or food poisoning? It was always a hot flash. This happened daily.

No one seemed worried about my symptoms, and I returned to my regularly-scheduled life without answers.

Something was wrong with me. But what? Most of the physicians I’ve seen in my life made me feel like they didn’t care about me or my problems.

What Do You Do When You Know You’re Not Fine?


Working in cybersecurity means you’re constantly playing a game of catch-up. Every day you learn something new, but your work is also never finished.

Whether you are a security researcher developing threat intelligence to power IDS / IPS systems or someone trying to plug holes in an area like application security, you will constantly be forced to find new solutions for unknown problems.

To Dutch security engineer Ferry (he prefers us not to share his last name), it’s this ever-evolving part of infosec that’s kept him in the field for over a decade. He currently works for Rijks ICT Gilde, a group of tech consultants who work on a variety of Dutch government IT projects. 

> “The thing I love most about my job is that every day comes with new challenges and opportunities. There are always new vulnerabilities to expose, new detection systems to set up, new hackers to catch. This job really is never done.”

Security engineers love working in the field of cybersecurity, also known as infosec or fosec, for a variety of reasons. One of the main reasons is the constant challenge and ever-evolving nature of the field. With new technologies and threats emerging all the time, security engineers are always learning and adapting to stay ahead of potential attacks.

Another reason security engineers enjoy working in fosec is the sense of purpose and importance of their work. With the increasing reliance on technology in nearly all aspects of our lives, the need for robust and effective cybersecurity measures is more critical than ever. Security engineers play a critical role in protecting sensitive information and ensuring the continuity of vital systems and services.

Additionally, the field of fosec offers many career opportunities and paths. From incident response and penetration testing to risk management and compliance, there are a wide range of specializations and roles to choose from. This variety allows security engineers to find a career that aligns with their interests and skills.

Finally, many security engineers find the field to be intellectually stimulating and rewarding. The field is full of complex problems and puzzles, and when a solution is found, it can be extremely satisfying.

Overall, security engineers appreciate the dynamic and challenging nature of fosec, the sense of purpose and importance of their work, the variety of career paths available, and the intellectual stimulation and rewards of the field.

Working in cybersecurity means you’re constantly playing a game of catch-up. Every day you learn something new, but your work is also never finished.

Why the security engineers loves working in fosec


A team of researchers at Jilin Engineering Normal University in China recently published a paper indicating they’d built an AI model capable of recognizing human facial expressions.

I’m going to save you some time here: they most certainly did not. Such a thing isn’t currently possible.

The ability to accurately recognize human emotions is what we here at Neural would refer to as a “deity-level” feat. The only people who truly know how you’re feeling at any given moment are you and any potential omnipotent beings out there.

Here are my three golden tips for realistic planning:

* Underestimate how much you can get done in a day
* Overestimate how much time a task will take
* Overestimate interruptions during your day

### The reason some bootcamp grads are set up to fail
* In my experience, not all bootcamps are created equal. They vary widely in acceptance processes, curriculum, program structure, and quality of instructors. They’re designed to push candidates through courses that will have them writing some code fairly quickly.

* As a result, programs are forced to strip away a lot of fundamentals — those basics that help developers understand the “why” behind the code they’re writing.

* When young software developers learn by copying and pasting, it can make troubleshooting difficult when they come across something that doesn’t fit the pattern they’re used to.

* Small businesses and startups are those most likely to hire developers without degrees, but I’ve seen too many bootcamp grads take jobs at startups only to find they haven’t learned enough to make any real impact.

### Up front:
The research is fundamentally flawed because it conflates facial expression with human emotion. You can falsify this premise by performing a simple experiment: assess your current emotional state then force yourself to make a facial expression that presents in diametric opposition to it.

If you’re feeling happy and you’re able to “act” sad, you’ve personally debunked the whole premise of the research. But, just for fun, let’s keep going.

### Background:
Don’t let the hype fool you. The researchers don’t train the AI to recognize expressions. They train the AI to beat a benchmark. There’s absolutely no conceptual difference between this system and one that tries to determine if an object is a hotdog or not.

What this means is the researchers built a machine that tries to guess labels. They’re basically showing their AI model 50,000 pictures, one at a time, and forcing it to choose from a set of labels.

### The problem:
All of this seems useful because, when it comes to outcomes that don’t affect humans, predictions models are awesome.

When AI models try to predict something objective, such as whether a particular animal is a cat or a dog, they’re aiding human cognition.

You and I don’t have the time to go through every single image on the internet when we’re trying to find pictures of a cat. But Google’s search algorithms do.

### Neural take:
This is a total scam. The researchers present their work as useful for “fields like human–computer interactions, safe driving … and medicine,” but there’s absolutely no evidence to support their assertion.

The truth is that “computer interactions” have nothing to do with human emotion, safe driving algorithms are more efficacious when they focus on attention instead of emotionality, and there’s no place in medicine for weak, prediction-based assessments concerning individual conditions.

A team of researchers at Jilin Engineering Normal University in China recently published a paper indicating they’d built an AI model capable of recognizing human facial expressions.

Uma Shankar Shanmugam