Ask HN: Is it a good idea to Use cloud providers as a UAT env?

[Shazeb]

Hi Everyone,

I'm a pentester and I just want to understand. If my client wants to give me a UAT environment. Is it a good idea to use digital ocean? If not, then what is the best way to deploy application for Web application Pentest. Like (UAT cloud or something).

Thanks in advance. :) Shazeb

[yuppie_scum]

Best practice is to maintain separate prod and non-prod tiers (isolate by different cloud account or at least vpc/network segregation) but with as much parity as possible between prod and uat.

[Shazeb → yuppie_scum]

Thanks for the reply. :) So, I'm thinking to create a small automation, where we can help our customer to deploy the application to the cloud for the UAT environment. And, Then Once the test is completed, then we can delete the application and the cloud instance. So they don't have to worry about the environment anymore. Do you have any opinion on this one? Or maybe you can suggest me something better. Because I have encountered so many times that, when we are on the client site, they are not ready with the testing environment, and this costs us time. In short, we waste our time on the client site