A quick, hassle-free way to stay on top of DevOps & Platform Engineering news.
Headline Tutorials:
🐞 “Implanting the Lambda execution environment” — A cryptocurrency malware miner deployed by attackers as a Lambda function that ran within customers environments using stolen or leaked AWS credentials.
💸 “How we accidentally burned $40,000 by calling recursive patterns” — To avoid recursive invocations between S3 and Lambda, its best practice to use a positive trigger, reserved concurrency and CloudWatch alarms.
🗃 “Kubernetes snapshots: What are they and how to use them?” — An introduction to snapshots in Kubernetes and an overview of typical usage cases. Creating PVC templates, cloning data for testing, and performing consistent backups.
🚨 “How to implement DevSecOps in a Kubernetes cluster environment” — This hands-on tutorial uses kube-bench and other tools to check if the deployed Kubernetes cluster is secure by running checks against CIS Kubernetes Benchmarks.
🔒 “Stop playing Whac-A-Mole, start using Least Privilege IAM policies” — This post looks at some of the challenges of setting up least privilege in AWS IAM and how you can start locking down access to S3 resources.
🌥 “Does Kubernetes really give you multicloud portability?” — All in all, deploying to a managed Kubernetes can’t be considered fully portable (or the silver bullet for portability)
🔧 “5 tools to auto-generate Terraform configuration files” — This blog post aims to make this transition easier by exploring the available approaches and tools for importing cloud resources that already exist on the cloud into Terraform configuration files.
👀 “Changing times (or, why is every layoff 10–15%?)” — Reading Elad Gil’s market analysis can give you the context to understand why and how certain companies operate in today’s economy and what it might imply for your company.
Latest open source projects
Sidekick
Sidekick is like open-source ChromeDev Tools for your backend. Collect real time data, cut your MTTR and monitoring costs with almost no overhead.
AI CLI
Get answers for CLI commands from GPT3 right from your terminal. For example you could ask the following question and get the corresponding linux command “Check process running on port 3000”.
Autograf
Dynamically generate Grafana dashboard based on Prometheus metrics. Autograf generates Grafana dashboard directly from /metrics or based on a metrics matching provided selector.
GitHub Audit Tool
A curated list of WebAssembly and Docker resources (tutorials, videos and books). Learn how to build, share, and run WebAssembly apps using Docker.
Tweet of the week
Read the full thread here.
Meme of the week
I hope this summary has been useful. Remember to subscribe to the newsletter to receive the latest DevOps trends in your inbox every week 🔥
Top comments (0)