• 27 Posts
  • 2 Comments
Joined 1 year ago
cake
Cake day: June 16th, 2023

help-circle

  • It all depends on what you want to do, ultimately. I would say there are plenty of roles where no coding knowledge is really necessary at all. The thing is, in cloud security specifically, you are talking about a universe of resources that all can be instantiated, manipulated, and interrogated all via APIs and various markup languages. So, I would say your biggest bang for the buck is going to be learning the ones you mentioned, and some more like YAML. TF, Ansible/puppet/chef. Anything that enables you do do what you want to do in the most efficient way is a good thing to learn.

    Designing a security tools is a completely different matter. Deciding which kind of coding to use is going to be a by-product of knowing what you want to accomplish first. Cloud-native tools should be designed in a cloud-native way, imho. The reality is you will use many different skills to take a security tool from idea to finished product.




  • Backing up Neil’s comment, you would be a rare bird indeed if you had more-than-adequate terraform and kubernetes skills.

    On Python, yes you want to know it well enough to read and perhaps edit Python code. It doesn’t mean you have to be a Python artist.

    DevOps/DevSecOps is important, and dovetails right into both of those skills. Understanding markup languages like YAML helps a lot.

    When you think about Linux, try to embrace the true utility of it. There are so so many ways to make your life easier in linux by truly learning your shell. zsh is the best, imho, but everybody has their own favorite. The shells are all kind of unique, even on the same operating system.