How Lowe’s SRE reduced its mean time to recovery (MTTR) by over 80 percent

Editor’s Note:In a previous blog, we discussed how home improvement retailer Lowe’s was able to increase the number of releases it supports by adopting Google’s Site Reliability Engineering (SRE) framework on Google Cloud. Lowe’s went from one release every two weeks to 20+ releases daily, helping meet its customer needs faster and more effectively. Today, the Lowe’s SRE team shares how they used SRE principles to decrease their mean-time-to-recovery (MTTR) by over 80 percent.The stakes of managing Lowes.com have never been higher, and that means spotting, troubleshooting and recovering from incidents as quickly as possible, so that customers can continue to do business on our site. To do that, it’s crucial to have solid incident engineering practices in place. Resolving an incident means mitigating the impact and/or restoring the service to its previous condition. The average time it takes to do this is called mean time to recovery (MTTR). Tracking this metric helps us stay on top of the overall reliability of our systems at Lowe’s, while simultaneously improving the speed with which we recover. Our goal is to keep the MTTR metric as low as possible, so that failures don’t negatively impact our business. Here are the four areas we addressed to drive holistic improvement in our MTTR.Lowe’s incident reporting processTo reduce MTTR, we created a seamless incident reporting process following SRE principles. Our incident reporting process is a workflow that starts at the time an incident occurs, and ends with an SRE captain who closes the action items after a postmortem report. With this approach, we are able to limit the number of critical incidents. The reporting process involves three core components: monitoring, alerting, and blameless postmortems.Monitoring and alertingHaving proper monitoring and alerting in place is crucial when it comes to incident management. Monitoring and alerting tools let you detect issues as soon as they occur, and notify the right person in the shortest possible time to take action. From a measurement standpoint, we track this as our mean time to acknowledge (MTTA). This is the average time it takes from when an alert is triggered, to when work on the issue begins.At the time of an incident, our monitoring and alerting tools notify the on-call SRE first responder via PagerDuty in the form of a phone call, text message and email. Our SRE software engineering team has done a lot of automation to enable various Service Level Indicator (SLI) alerts and Service Level Agreement (SLA) notifications. The on-call SRE then initiates a triage call with our service/domain stakeholders to resolve the incident. As a result, we reduced our MTTA from 30 minutes in 2019, to one minute – a 97 percent decrease. Blameless postmortems: learning from incidentsA postmortem is a written record of an incident, its impact, the actions taken to resolve it, the root cause and the follow-up actions to prevent the incident from recurring (see example here). A blameless postmortem builds on that and is a core part of an SRE culture, and our culture at Lowe’s. We ensure that individuals are not singled out, and the outcome for all postmortems are directed toward learnings and process improvement.For us, the postmortem process is the biggest part of our incident workflow. When an SRE creates a new postmortem report, the first step is to conduct a postmortem session with domain stakeholders to review the report. The postmortem then goes into the review stage and gets reviewed by more stakeholders in our weekly postmortem meeting. In the final stage of this process, the SRE captain will close the report once everyone in the weekly meeting agrees that the report is complete.To conduct a successful postmortem, it is critical to keep the focus on identifying gaps and issues with the system and operations processes, rather than an individual, and generate concrete actions to address the problems we’ve identified. To ensure this, we follow a couple of best practices:We start by gathering the facts from the person who identified the problem, and each SLI owner has to identify a gap or the next SLI upstream owner who created the impact for them.Every SLI owner is provided full opportunity to present their case, and identifying the issue is done as a community exercise. Once action items and process changes are identified, an owner is nominated to complete the actions, or they will volunteer. For easy reference, we publish and store postmortems in our incident knowledge base. This process helps SREs continuously improve as future incidents arise. Continuous Improvement Encouraging a culture of honest, transparent and direct feedback that you need for blameless postmortems is often an iterative process that needs sponsorship from executives, empowering incident captains to lead the entirety of the discussion and outcomes. Running successful postmortems, and completing action items from them, needs to be recognized and accounted for in SRE performance objective assessment. As shared in Google’s SRE book, the best practice is to ensure that writing effective postmortems is a rewarded and celebrated practice, with leadership’s acknowledgement and participation. This is possibly the hardest part to accomplish in an effective postmortem during a cultural transformation unless you have full buy-in from leadership.However, it’s all well worth it. This process is a key part of how we were able to improve our MTTR over time—from two hours in 2019 to just 17 minutes! Our SRE incident reporting process has also transformed how our company solves issues. By streamlining this workflow from alerting, to solving an issue, to blameless postmortems, we have reduced our MTTR by 82 percent and our MTTA by 97 percent. Most importantly, our team is learning from every incident and becoming better engineers as a result. Visit the SRE Google Cloud website to learn more about implementing SRE best practices in the cloud.AcknowledgementSpecial thanks to Rahul Mohan Kola Kandy, Vivek Balivada, and the Digital SRE team at Lowe’s for contributing to this blog post.Related ArticleHow Lowe’s meets customer demand with Google SRE practicesLowe’s has adopted Google SRE practices to help developer and operations teams keep up with ecommerce demand.Read Article
Quelle: Google Cloud Platform

Staying Ahead of New Regulations in APAC

Over the course of the COVID-19 pandemic, we’ve seen our customers across the globe increase their use of cloud services, in large part due to an increase in e-commerce activities, digitization efforts, and the move to remote work. This shift has put further emphasis on the importance of security and control in cloud computing. Cloud Service Providers (CSP) have a responsibility to provide transparency and assurance around how customer data is being stored, processed, and protected, which is why in 2021 we’ve increased our efforts to support security and compliance in the APAC region.   At Google Cloud, we strongly believe in trust and transparency, and recently outlined criteria we believe defines what it means to be a trusted cloud service provider. Data protection is a baseline requirement across many industries and the need for a trusted, compliant cloud service provider becomes increasingly important as new regulations are published and organizations shift their IT operations and workloads to public cloud platforms. In the APAC region, there have been some key regulatory updates over the course of the last year, which include: IRAP  (Information Security Registered Assessors Program) – A framework for assessing the implementation and effectiveness of an organization’s security controls against the Australian government’s security requirements. ISMAP (Information System Security Management and Assessment Program) – A Japanese government system for assessing the security and operation of cloud service providers to participate in public sector tenders.ETDA (Electronic Transaction Development Agency) – An agency setting the security standard for meeting control systems.RBIA (Risk Based Internal Audit) – An internal audit methodology that provides assurance to a Board of Directors on the effectiveness of how risks are managed. GR 95 (Presidential Regulation No. 95) – Responsible for providing guidance to government agencies and businesses to implement online governance tools used for public services.We have posted updates to guidance and resources to help support regulatory and compliance requirements as part of our compliance offerings, which include compliance mappings geared toward assisting regulated entities with their regulatory notification and outsourcing requirements. You’ll also be able to see the results of the assessments and certifications that we’ve completed so far this year:Australia – IRAPIndia – RBI Outsourcing GuidelinesIndia –  Ministry of Electronics and Information Technology (MeitY)Indonesia – Government Regulation (GR) 95Japan – ISMAPKorea – Regulation on Outsourcing of Information Processing Business of Financial InstitutionsKorea – K-ISMS (Korea Information Security Management System)Singapore – Multi-Tier Cloud Security (MTCS) Tier 3 Singapore – MAS Technology Risk Management Guidelines (MAS TRM)Thailand – ETDAIn the coming months we will continue providing updates and you can look forward to the following: Australia SCEC Zone 3/ PSZ 3 – Enablement of SCEC Z3 for our Melbourne Region, allowing for regional replication.2G3M Japan – Healthcare Security Guidelines for the Ministry of Health, Labor, and Welfare. MAMPU (Malaysian Administrative Modernization and Management Planning Unit) – A government agency in Malaysia tasked with facilitating the modernization of the public administrative system and driving economic growth in Malaysia by helping public sector agencies adopt innovative technologies.As this space continues to evolve, we are committed to doing our best to stay ahead of new and changing regulations. Look for updated compliance offerings and continued momentum in this space.Related ArticleBuilding global momentum with government and security compliance certificationsOperating virtually has heightened the importance of security and compliance for public sector agencies around the world.Read Article
Quelle: Google Cloud Platform

What is Cloud SQL?

If you are building an application, chances are you will need a relational database for  transaction processing. That’s where Cloud SQL comes in. It is a fully managed relational database for MySQL, PostgreSQL and SQL Server. It reduces maintenance cost and automates database provisioning, storage capacity management, backups and out of the box High availability and Disaster recovery/failover. Click to enlargeHow to set up Cloud SQL?Cloud SQL is easy to set up. You select the region and zone where you would like the instance to be and they get created. Configure the machine type with the right number of CPU & amount of memory your application needsChoose storage type between solid state and hard disk drives depending on latency, QPS and cost requirements. Reliability & Availability Cloud SQL also offers automated backups and point-in-time recovery options. You can set time slots and locations for backups. For production applications it is recommended to enable built-in high availability (HA) option which supports99.95% SLA. With this, Google Cloud continuously monitors the Cloud SQL instance with a heartbeat signal and when a master fails an automatic failover is triggered to another zone in your selected region in case of an outage. You can also create replicas across regions to protect fromregional failure. And, you can enable automatic storage increase to add more storage when nearing capacity. Cloud SQL Insights, a free tool, helps detect, diagnose, and identify problems in a query for Cloud SQL databases. It provides self-service, intuitive monitoring, and diagnostic information that goes beyond detection to help you to identify the root cause of performance problems.How to migrate an existing MySQL database to Cloud SQL?If you have an existing application that you are moving to cloud then chances are that you need to migrate your existing SQL database to Cloud SQL. Database Migration Service(DMS) simplifies migration of MySQL and PostgreSQL databases from on-premises, Google Compute Engine, and other clouds to Cloud SQL. It is serverless, easy to set up and available at no additional cost. It replicates data continuously for minimal downtime migrations. Here’s how it works: Provide your data source details – type of database engine MySQL, PostgreSQL, Amazon RDS or others.  Pick one time or continuous replication for minimal downtime. Create a Cloud SQL instance as your destination.For connectivity to the source instance DMS makes it easy by providing multiple options. You can allow-list an IP address, create a reverse SSH tunnel via cloud hosted Virtual Machine or set up VPC peering. Finally test and promote the migrated instance to primary Cloud SQL instance. Security & ComplianceThe data in CloudSQL is automatically encrypted at rest and in transit. External connections can be enforced to be SSL-only. For secure connectivity you can also use Cloud SQL Proxy which is a tool to help you connect to your Cloud SQL instance from your local machine. You can control network access with firewall protection. From the compliance perspective Cloud SQL is SSAE 16, ISO 27001, PCI DSS v3.0, and HIPAA compliant.Cloud SQL in actionCloud SQL can be used in multiple use cases in conjunction with different compute options. You can use it in any application as a transactional database, long-term analytics backend with BigQuery, predictive analytics with Vertex AI and event driven messaging with Pub/Sub. Cloud SQL when combined with Datasteam(Change Data Capture) makes a great real-time analysis solution for any incoming data. Here are a few examplesWeb/mobile applicationMobile gaming Predictive analysisInventory trackingConclusionWhatever your application use case may be, Cloud SQL is designed to integrate with different services within and outside Google Cloud. Use this fully managed relational database and let Google take care of the endless maintenance required to run a database including setting up servers, applying patches and updates, configuring replication and managing backups. Instead, focus your energy on higher priority work where you can really add value. For a more in-depth look into Cloud SQL check out the documentation.For more #GCPSketchnote, follow the GitHub repo. For similar cloud content follow me on Twitter @pvergadia and keep an eye out on thecloudgirl.devRelated ArticleMigrate your Microsoft SQL Server workloads to Google CloudCloud SQL for SQL Server is now available, so it’s easy to migrate your Microsoft SQL Server 2008 instances for a managed, compatible dat…Read Article
Quelle: Google Cloud Platform

How to check all the right boxes for your cloud migration before you get started

Cloud adoption and migrations have continued to accelerate over the years. According to Flexera’s 2021 State of the Cloud report, 31% of respondents spend at least $12,000,000 per year on public cloud, which is up from 16% in the same survey in 2020. Additionally, enterprises already run about 47% of their workloads and store 44% of their data in the public cloud. Organizations have come a long way, but many still have at least half way to go to full migration to the public cloud. As the public cloud becomes a multi-billion dollar business and the IaaS market share of computing continues to grow, enterprises leverage the public cloud more and more each year. But even though self-provisioning of new workloads in public clouds is simple, migrating existing services to the cloud requires more preparation. A common misperception is that migrating existing workloads to the public cloud, especially those with a lot of data, is complex, time consuming and risky. With the right planning, however, enterprise IT organizations can rapidly establish good migration practices to accelerate migrations and lower risk. To help you through all of this, we’ve put together a guide and checklist of essential tips for the four key parts of the migration process: Assess, Plan, Migrate, and Optimize. Those four key phases will help ensure a successful cloud migration, so we’ve put together this white paper to explore those facets, and we concluded with a handy checklist to help you get started right away, part of which you can see in the screenshot below:At Google Cloud, we’re here to help make sure your migration goes successful from start to finish (and beyond)! To learn more, download this migration guide and checklist. Or, if you’re really ready to jump start your migration today, you can take advantage of our current offer by signing up for a free discovery and assessment or exploring our Rapid Assessment and Migration Program (also known as RAMP).
Quelle: Google Cloud Platform

AWS Database Migration Service unterstützt jetzt die Migration mehrerer Datenbanken in einer Aufgabe unter Verwendung von MongoDB als Quelle

AWS Database Migration Service (AWS DMS) erweitert die Funktionalität um die Unterstützung der Migration mehrerer Datenbanken in einem Vorgang unter Verwendung von MongoDB und Amazon DocumentDB (mit MongoDB-Kompatibilität) als Quelle. Mit AWS DMS können Sie jetzt mehrere Datenbanken eines MongoDB-Clusters gruppieren und sie mit minimaler Ausfallzeit mit einer DMS-Aufgabe zu jedem von AWS DMS unterstützten Ziel, einschließlich Amazon DocumentDB (mit MongoDB-Kompatibilität), migrieren.
Quelle: aws.amazon.com

Amazon Monitron bringt ein neues Ethernet-Gateway-Gerät auf den Markt

Heute kündigen wir die Markteinführung von Amazon Monitron Gateway (Ethernet) an, einem neuen Gateway-Gerät, mit dem Kunden ihr Ethernet-Netzwerk nutzen können, um Monitron mit dem Internet zu verbinden. Das Ethernet-Gateway ergänzt das WiFi-Gateway, das im Dezember 2020 eingeführt wurde, und bietet Kunden noch mehr Optionen für die Internetkonnektivität von Amazon Monitron. Amazon Monitron ist ein End-to-End-System, das Machine Learning (ML) nutzt, um abnormale Bedingungen in industrieller Ausrüstung zu erkennen, sodass Sie eine vorausschauende Wartung einführen und ungeplante Ausfallzeiten reduzieren können. Es umfasst Sensoren zum Erfassen von Vibrations- und Temperaturdaten von Geräten, ein Gateway-Gerät zum sicheren Übertragen von Daten an AWS, den Amazon Monitron Service, der die Daten mithilfe von Machine Learning auf abnormale Gerätebedingungen analysiert, und eine dazugehörige mobile App zum Einrichten der Geräte und Empfangen der Berichte zum Betriebsverhalten und zur Warnung vor möglichen Fehlern in Ihren Geräten.
Quelle: aws.amazon.com

Amazon RDS for MariaDB unterstützt die Nebenversionen 10.5.12, 10.4.21, 10.3.31, 10.2.40

Amazon Relational Database Service (Amazon RDS) for MariaDB unterstützt jetzt die MariaDB-Nebenversionen 10.5.12, 10.4.21, 10.3.31 und 10.2.40. Wir empfehlen Ihnen, auf die neuesten Nebenversionen zu aktualisieren, um bekannte Sicherheitslücken in früheren Versionen von MariaDB zu beheben und von den zahlreichen Fehlerbehebungen, Leistungsverbesserungen und neuen Funktionen der MariaDB-Community zu profitieren.
Quelle: aws.amazon.com