Dev SecOps - Githubissues

trevor-higbee / snowflake-tools

Useful scripts, utilities, and tools for Snowflake

MIT License

13 stars 3 forks source link

Dev SecOps #13

Open trevor-higbee opened 6 months ago

trevor-higbee commented 5 months ago

https://thriftbooks.atlassian.net/wiki/spaces/EN/pages/2898854605/DevSecOps

Azure Devops Service Accounts

Today: One Account w/ powerful permissions on all servers
Future: Multiple Accounts w/ tailored permissions on few servers
Risks Mitigated:
Risks Remaining:

Application Accounts (for apps)

Today: One Account w/ powerful permissions across many services
Future: Multiple accounts w/ tailored permissions on select services
Risks Mitigated:
Risks Remaining:

Application Administration Accounts (for humans)

Today: Service account used by many
Future: Non-shareable AD accounts enabled for few(ish)
Risks Mitigated:
Risks Remaining:

Overall Risks Remaining:

Database access