Fugue

What do you like best?

Fugue allows me to quickly identify what parts of our cloud infrastructure are not compliant with our policies, understand why that policy is important, what other components would be affected and then gives me the steps to remediate the problem. Once everything is compliant, Fugue can monitor for drift and automatically correct things that go out of compliance. The product already had a bunch of great pre-made policies for common compliance types, but you can also use an industry standard and open language to create custom rules for any compliance that your company may have. Using the built-in visualizer lets you quickly see how your infrastructure components tie together and how the compliance failure in one area can affect other parts of your product.

Fugue, the company, has been laser focused on cloud compliance for years. Their experience has led to an industry best product for ensuring that your cloud environment is secure and stays that way. Compliance and drift monitoring are critical for anyone running production workloads in the cloud, and Fugue is the absolute best solution to provide those.

What do you dislike?

Fugue has the experience and knowledgable staff to built the best-in-class compliance monitoring and enforcement solution, but sometimes there are features of the product that I would like to take advantage of, which don't yet fit with how I organized my cloud environment many years ago. If I were building our cloud environment today, green field, I would have used current best practices which would better match up with how Fugue expects thing to be laid out. They are always improving the product and soon this won't be a concern at all. Overall this affects very few parts of our usage of Fugue, but it can be frustrating to have to wait for a feature to be rolled out.

What problems are you solving with the product? What benefits have you realized?

GlobalGiving uses Fugue to ensure that our environment is compliant with PCI, and that nothing changes within our environment which would then violate our policies. Fugue continuously monitors for changes that might cause compliance violations or weaken our security, then alerts our staff so we can fix things before they cause any real problems. We have reduced the number of accidental changes, and completely eliminated changes which were not made through our Infrastructure as Code solution.