[verdverm]

Actually, almost everything stays within the private cloud, health care industry

GCP (main), AWS/Azure (b/c customers), Jenkins/Argo

TF/Helm are IaC and run from containers, no hashicorp services

CloudSQL, why are you sending your db queries to a SaaS?

LGTM for observability

The vendors we do have are WIF'd (i.e. code & secops scanning)

WIF is the key, mature vendors are supporting WIF, and amazingly the hyperscalers are supporting each others WIFs for cross-cloud, so we can give a GCP SA, AWS perms and vice versa