Two parts of a cloud setup are easy to overlook and worth securing early: the build pipeline and the APIs your apps expose. This guide covers the practical controls for both, written for healthcare and fintech teams in San Diego that run production workloads in the cloud. Why pipelines need attention A CI/CD pipeline can build, deploy and change infrastructure, so it often holds more access than any single engineer. If it signs in to the cloud with a long-lived access key, that key becomes one of the most valuable secrets you have. Replace long-lived keys with OIDC federation Instead of storing a permanent cloud key in the pipeline, use OIDC federation so each run receives temporary credentials. There is no standing key left behind to leak. Keep secrets out of code Store sensitive values in your cloud provider's key or secrets management service rather than in repositories or shared build variables, and rotate keys on a schedule. Check compliance inside the pipeline P...
I have noticed that the slowest part of a mining work order is rarely the repair. It is the time between spotting a defect and getting the right technician to the right asset. Teams I talk with in San Diego who support mining and natural resources operations often describe the same pattern: the systems work, but the handoffs between them do not. The lessons below come from looking at where that time actually goes, and how a Power Automate workflow can close the gaps. Lesson One: The Handoffs Are the Real Problem Take a haul truck with a hydraulic leak. The defect lands on a paper card, then in an email, then in the ERP, then in the maintenance schedule, typed by three different people. Each retyping invites a mistake, and nobody is sure which record is current. Capturing every request in one structured record, whatever its source, removes most of that confusion before a person even touches it. Lesson Two: Validate Before You Distribute If I could give only one piece of advice, it would...