The Ocado Developer Portal serves as the central hub of information for your applications and their resources. Its core component, the Catalog, allows you to register applications along with their details and crucial ownership information. This ensures that only authorised application owners can manage their respective applications.
The platform provides a dedicated solution for inventory management, guaranteeing that all deployed applications are registered and their owners defined. To maintain data integrity, the Developer Portal includes built-in mechanisms that ensure data accuracy, complemented by regular prompts for review and confirmation. This precision is particularly invaluable during audits, significantly simplifying the audit process and ensuring strong governance over your software landscape.
Through the Developer Portal, you can browse all resources owned by a given application, offering clear accountability and simplifying management. This also includes the ability for EngProd (Engineering Productivity) to identify the owners of AWS resources via solutions like tagging.
The Developer Portal allows you to review the audit log of all changes done within the system, providing a transparent record of operations.
The Service Catalogue, part of the Ocado Developer Portal, enforces a high level of consistency and security across your cloud environment.
The platform enforces resource consistency by ensuring that resources are backed up, encrypted, and immutable, with suitable data retention policies in place to ensure business continuity and facilitate forensic analysis. Automated restoration tests are performed to validate recovery processes.
The Ocado Developer Portal provides a safe and scalable way to define IAM policies based on the least-privilege principle. It continuously monitors adherence to best practices, flagging any deviations to clients, such as the need for rotating keys. This approach significantly enhances the security posture compared to granting excessive or unlogged permissions.
The platform is designed to manage the increasing complexity related to the amount of available solutions, security, and governance. It continuously monitors for operational and security anomalies. Through the Service Catalogue, the platform prioritises compliance with good security practices, which leads to accelerated audits and enhanced software development maturity.
By automating the provisioning and management of AWS resources, the Service Catalogue reduces the overhead for teams, allowing them to focus on core product development rather than infrastructure management. This includes automated solutions for deploying applications and provisioning AWS resources. The underlying infrastructure, operating systems, and network configurations are managed by the platform.
Let’s talk your challenges, our lessons learned and what engineering maturity really looks like in practice.