Welcome to episode 272 of The Cloud Pod! This week, Matthew and Justin are bringing you all the latest in cloud and AI news, including new updates to the ongoing Crowdstrike drama, JSON schemas, AWS vaults, and IPv6 addresses – even some hacking opportunities! All this and more, this week in the cloud.

• The cloud pod is now logically air-gapped
• The Cloud Pod has continuous snark
• The Cloud Pod points the finger at delta
• AI now with JSON SCHEMAS!!!

00:35 Crowdstrike RCA

• The final RCA is out from Crowdstrike, and as we talked during the preliminary report, this was an issue with a channel file that had 21 input parameters. No update previously had more than 20, and it was not caught in earlier testing.
• Crowdstrike has several findings, and mitigating actions that they are taking. They go into detail on each of them, and you can read through all of them at the linked document.

02:31 Justin – “…the one thing I would say is this would be a perfect RCA if it included a timeline, but it lacks, it lacks a timeline view.”

12:06 Justin – “…their mitigations don’t have any dates on them of when they’re going to be done or implemented, which, in addition to a timeline, it would be nice to see in this process.”

15:46 Microsoft joins CrowdStrike in pushing IT outage recovery responsibility

back to Delta

• Microsoft has joined Crowdstrike in throwing Delta under the bus.
• Delta Airlines has been blaming Crowdstrike and MS for their recent IT woes, which the company claims cost them over $500 million.
• Microsoft says “Our preliminary review suggests that Delta, unlike its competitors, has not modernized its IT infrastructure, either for the benefit of its customers or for its pilots and flight attendants” Mark Cheffo from law firm Dechert representing MS.
• Gonna get ugly before this all gets settled. *Insert Michael Jackson eating popcorn gif here*

16:43 Justin – “The struggle with, you know, offering to send someone on site to help you is, you know, you, you can’t vet them that quickly. And so you also have an obligation to your shareholders. You have obligations to your security controls and your SOC and ISO and all the things that you’re doing, you know, to, to allow some strangers into your network and then give them access required to fix this issue, which in some cases required you to provide local encryption keys, and local administrator passwords, like you’re, you’re basically saying, you know, here’s the keys. Cause we’re in a, you know, everything’s in crisis and we’re going to throw security out the window to allow these people to come in and touch my environment to get us back up and running. I could see, I can see the argument both ways.”