#59: AWS Well-Architected Framework

DevOps teams know that a fast, reliable, and traceable CI/CD pipeline is key to accelerating their work. At Octopus, we know DevOps! We help you automate complex deployments so you can ship code faster - Get started with Octopus today

🎧 PODCAST/WEBINAR OF THE WEEK

Mike Hendrickson, VP of Tech and Dev Products at Skillsoft, breaks down the hard and soft skills associated with landing a role as an security architect, enterprise cloud architect, and data scientist/architect 🌥

📖 POSTS OF THE WEEK

How to extend Kubernetes API
There are many ways to extend Kubernetes with custom functionality, starting from writing kubectl plugins and ending with implementing scheduler extensions. If there were a ranking based on the hype around the approach, developing custom controllers or operators would win.
Read more »

"How Stack Overflow is leveling up its unit testing game" - In the early days of Stack Overflow, the team neglected unit tests because of the codebase. This article cover what Stack Overflow's team are doing to ramp up on their unit testing program - Read more »

"A guide to secrets management with GitOps and Kubernetes" - There are approaches and open source projects in the Kubernetes ecosystem that address secrets management storage, each in their different ways. This document provides an overview of several popular options in this space - Read more »

"Remote development at Slack" - For years, engineers at Slack isolated and tested their changes by running microcosms of the Slack application on their local computers. This was difficult for many reasons: it involved installing and maintaining local dependencies, handling resource intensive software, and writing custom scripts that must work across different operating systems - Read more »

"Cubernetes" - This blog post will include a parts list and process for anyone who wants to create a home lab Kubernetes cluster - Read more »

"Securing Kubernetes Secrets with HashiCorp Vault" - Secrets in Kubernetes are used to store sensitive information. This blog post will show how to secure Kubernetes secrets using the Hashicorp vault - Read more »

"AWS Well-Architected Framework Notes 2022" - This article take a fast-forward look at the AWS Well-Architected Framework that helps AWS customers to design solutions following best practices while designing the architectures of their solutions. It enables the users to design secure, reliable, and high performant cloud applications and workload - Read more »

"Jenkins discloses dozens of zero-day bugs in multiple plugins" - On Thursday, the Jenkins security team announced 34 security vulnerabilities affecting 29 plugins for the Jenkins open source automation server, 29 of the bugs being zero-days still waiting to be patched - Read more »

📕 BOOK OF THE WEEK

This has been a book on my list to read for some time now. This book along with a "The Power of Now" is a foundational book on managing mind, mindset, and mindfulness. Dr. Dweck did a fabulous job sharing her years of research and the discoveries that she and her team made.
We've always used the phrases "open-minded" and "closed-minded," but after reading this book, you will use them more discriminantly. A must read book for all parents, teachers, managers, coachs... every one!

🛠 PROJECTS OF THE WEEK

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.4.0 - Read more »

in-toto provides a framework to protect the integrity of the software supply chain. It does so by verifying that each task in the chain is carried out as planned, by authorized personnel only, and that the product is not tampered with in transit - Read more »

PacketStreamer is a high-performance remote packet capture and collection tool. It is used by Deepfence's ThreatStryker security observability platform to gather network traffic on demand from cloud workloads for forensic analysis - Read more »

A collection of pure POSIX sh alternatives to external processes. The goal of this book is to document commonly-known and lesser-known methods of doing various tasks using only built-in POSIX sh features. Using the snippets from this bible can help remove unneeded dependencies from scripts and in most cases make them faster - Read more »

GitDB is a decentralized document database written in Go that uses Git under the hood to provide database-like functionalities via strictly defined interfaces. GitDB allows developers to create Models of objects in their application which implement a Model Interface that can access it's persistence features. This allows GitDB to work with these objects in database operations - Read more »

💼 OPEN JOBS OF THE WEEK