Hi all, my team is gearing up to deploy our first ...
# ask-metaflow
e
Hi all, my team is gearing up to deploy our first model with metaflow. Our company doesn’t really have any K8S infrastructure, so we’ve been looking at deploying via Step Functions. When we brought this to our Dev Ops team they denied our request for
states:CreateStateMachine action
permissions to be assigned to our AWS profiles. They specifically stated that allowing individuals to run something like
python parameter_flow.py --with retry step-functions create
from their computer is SOX non-compliant, as it allows an individual to make changes to production resources without third party approval. Does anyone here have an alternative way to deploy flows that would be considered compliant? We’re an Azure Dev Ops shop, so an ADO pipeline seems like the most direct approach to me.
v
yep, you can deploy via a CI/CD system
you can make credentials to deploy only available to your deployment pipeline, so individual users can't deploy directly.

You can see the idea in this video

the video showcases GitHub Actions but the same principle should work on ADO
e
Thanks ville, we’re looking into it now to see how much re-work it’ll take for ADO. For others looking at this thread, link to the repo that’s associated with the video ville shared.