May 2023 Summaries

As a SaaS provider, Humanitec prioritizes information security and has achieved ISO 27001 certification through a thorough audit by Vanta. This globally recognized standard provides guidelines for information security management systems (ISMS) to secure business and customer data from internal and external threats. By achieving this certification, Humanitec demonstrates its commitment to protecting customer data, boosts customer confidence, and enhances brand reputation. The ISO/IEC 27001 standard aims to secure people, processes, and technology via the C-I-A triad of confidentiality, integrity, and availability, ensuring that data is protected against unauthorized access, verified for accuracy and trustworthiness, and made available when needed.

This article discusses a workload-centric approach to deployment, which aims to shield developers from infrastructure and configuration management complexities, enabling self-service and standardization, and ultimately delivering software of value quicker. A workload-centric approach uses a tightly scoped workload specification with a Platform Orchestrator, providing benefits such as shielding developers from configurational complexity, declaring dependencies explicitly, and treating every deployment like day zero. This approach is beneficial for both developers and platform engineers, enabling developers to focus on coding and deploying while platform engineers standardize infrastructure and configuration management. The two main components of this approach are a workload specification and a Platform Orchestrator, which work together to enable dynamic configuration management and provision resources based on context. By adopting this methodology, developers can free up time to deliver software that adds greater business value without being bogged down by tedious infrastructure tasks.

At Humanitec, versioning of shared values and secrets has been introduced to increase transparency and enable additional functionalities. This feature allows users to track changes and revert individual values or entire value sets to previous versions. With the introduction of versioning, users can now manage environment-specific configurations in a more controlled and transparent manner.