I've seen situations where everyone on the engineering team have direct SSH access to the production database and other cases where practically no one does, and everything is done through GitOps or similar peer-reviewed migrations. Curious what have you seen when it comes to production access?
Ask HN: How many engineers have direct access to production where you work?
1–10 of 11 posts
Re: Ask HN: How many engineers have direct access to production where you work?
#2All three of us.
Re: Ask HN: How many engineers have direct access to production where you work?
#32/5 engineers. SOC 2 compliance forces us to use automation and peer reviewed actions as much as possible, which may slow you down in the short term, but improves reliability and security in the long run.
Re: Ask HN: How many engineers have direct access to production where you work?
#4I work in a highly regulated environment. Big company.
The DBA team sets up databases and service accounts. They give those accounts to the developers. The two can’t do each others’ jobs. It helps that we are regularly audited.
Have also worked at a startup where things where as you described. I ended that immediately. It took us some time to figure out who needed what and how we could accommodate proper controls.
It really depends on circumstances, but start thinking in terms of “blast radius”.
Re: Ask HN: How many engineers have direct access to production where you work?
#5We've had very segmented access for all of our Ops people. It took a while to get used to and made alot of sense at the time.
Any privileged access is done through our jump boxes.
However there are times where we need full access to production like some of our applications would which makes us question the whole point of the excerise.
Re: Ask HN: How many engineers have direct access to production where you work?
#6Company with hundreds of engineers, we all have access, but we need to (a) raise a ticket explaining why we need it and (b) have a peer (note: peer, not manager or something) confirm. And if you're on-call this doesn't aply.
Re: Ask HN: How many engineers have direct access to production where you work?
#7I work at a bigtech company, and, depending on how you look at it, either everyone in a technologist role has prod access or nobody does. You have to get peer approval to access your team's sliver of prod, and some team's take this very seriously, while others act as rubber stamps for each other.
Re: Ask HN: How many engineers have direct access to production where you work?
#8I work at a bigtech company, and, depending on how you look at it, either everyone in a technologist role has prod access or nobody does. You have to get peer approval to access your team's sliver of prod, and some team's take this very seriously, while others act as rubber stamps for each other.
Wait wait hang on… I’m confused. I was with you on the “everyone has prod access” but then you went and qualified it with teams owning slivers of something or other.
That doesn’t sound like full access to production.
I bet they didn’t even have cloud console admin.
Re: Ask HN: How many engineers have direct access to production where you work?
#9It varies, and it can ebb and flow at a single company, in a single business unit even.
Some of the… more permissive arrangements have been rather… fascinating.
Some of the supposedly well regulated ones were more like cults. Bring your completed forms, receive your foolishly named certification. Oh the things the forms are asking about? Nah it doesn’t really matter. Understand the requirements? You bet. There’s only one. Complete those forms. Get that star.
Not sure I have ever seen it done well. Certainly some places far better than others.
Re: Ask HN: How many engineers have direct access to production where you work?
#10Define 'engineers'. Are you going to use the specific meaning or the inaccurate, wider usage of the term? (as in the meaningless, poorly-specified 'software engineers')