Werner Vogels: Continuous deployment is far more secure than massive code reviews
Dr. Werner Vogels · A Conversation with Werner Vogels · Y Combinator · Nov 11, 2018 · at 51:29
Amazon CTO Dr. Werner Vogels contrasts automated continuous deployment testing with traditional monolithic security audits.
0:00 / 0:27exact quote · 27.6s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“Now, I honestly believe continuous deployment actually is better from a security point of view, because in the past you would write 50,000 lines of code, Security team would come in, would review it, would bless it, and they had no clue what they were doing. That would bless it. 50,000 lines of code. You have no idea. Yeah. And then you would deploy it. Changing five lines of code is something that you can actually test with automated processes and automatic reasoning and things like that, that you actually are building the right, right, right, right, right thing.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Dr. Werner Vogels
Werner Vogels: Amazon accepts duplication and technical debt to maximize speed
“At Amazon, moving fast and innovating fast, and having a very long pipeline of experiments, that's the more and most important thing, so you're willing to allow duplication to happen, you're allowed to create technical debt, as long as you know that you have t…”
Werner Vogels: Hierarchy is unnatural; fast-moving companies should remove structure
“There's a very unique culture at Amazon, I think, that works really well for fast-moving companies, and that is to have, to build your teams as independent as possible, to remove as much hierarchy and structure from your organization as that is possible.
Hier…”
Werner Vogels: Engineer-led product development results in pure technology, not actual products
“If you're a heavy technology company, lots of engineering, there's a risk that the engineers get in charge. Yeah? If they get in charge, you do not necessarily build products, you build technology.”
Werner Vogels: Mercenary and missionary startups require fundamentally different tech architectures
“Jeff often makes the distinction between mercenaries and missionaries. Yeah? Mercenaries are the startup founders that are in it for the money. Yeah? And missionaries are the ones that are in it for the love of the product. Yeah? I want to build this product, …”
Werner Vogels: Median latency is useless; engineers must optimize the 99th percentile
“A medium latency of, let's say, 1.2 seconds off your webpage to your customers doesn't say anything. Just says that 50% of your customers have a worse experience. You need to know how much worse. And then, from an engineer, so for example, the 99 percentile or…”
Werner Vogels: Early startups failed due to physical IT infrastructure costs
“So most of those companies that were initially successful around the Amazon catalog
All failed.
And they didn't fail because they didn't have great ideas.
They failed because they couldn't get their IT staff ready, or get the money to actually do, do, do, d…”