#73: State of AWS Security

📖 POSTS OF THE WEEK

A look into real-world AWS environments
The folks at Datadog analyzed trends in the implementation of security best practices and took a closer look at various types of misconfigurations that contribute to the most common causes of security breaches.
Read more »

"The art of logging" - In this article, you will identify the optimal format for structuring your logs that is easy for humans and machines to parse and understand - Read more »

"Automate boring tasks with Hooks" - This article will focus on the pre-commit hooks. It outlines how to install and set up pre-commit hooks and list the top 8 hooks that you need to setup - Read more »

"Uncovering a 24-year-old bug in the Linux Kernel" - How a failing rsync run led to the discovery of a long-standing bug in the Linux TCP implementation - Read more »

"Generate PDFs at scale on Kubernetes" - Learn how to run headless browsers on Kubernetes with massive scale using OpenFaaS and Puppeteer - Read more »

"You should not be using AWS. Probably" - Why choosing a popular cloud service, like AWS or Google Cloud Platform, may be the wrong choice for you and what to do instead - Read more »

"Evolution of HTTP" - Keep reading to learn how HTTP evolved from a protocol designed to exchange files in a semitrusted laboratory environment into a modern internet maze - Read more »

"Best practices for secure infrastructure access" - This whitepaper takes a deep look at the challenges posed by relying on a purely networking-based security policy, and how to reframe this problem in a realistic light - Read more »

🛠 PROJECTS OF THE WEEK

App secret infrastructure for cloud-native, remote dev teams. Onboardbase is the first secret manager that makes it easy to securely provision, manage, rotate and monitor secrets everywhere - Read more »

Badrobot is a Kubernetes Operator audit tool. It statically analyses manifests for high risk configurations such as lack of security restrictions on the deployed controller and the permissions of an associated clusterole - Read more »

SigNoz helps developers monitor applications and troubleshoot problems in their deployed applications. SigNoz uses distributed tracing to gain visibility into your software stack - Read more »

A toolkit for building rich console apps for .NET, .NET Core, and Mono that works on Windows, the Mac, and Linux/Unix - Read more »

📰 NEWSWORTHY STORIES

"Google Cloud Next ‘22 in under 13 minutes" - Read more »

"PostgreSQL 15 Released!" - Read more »

"State of DevOps 2022" - Read more »

"Microsoft launches new security services aimed at protecting code in the cloud" - Read more »

📕 BOOK OF THE WEEK

The book offers two excellent insights: 1. How people successfully work together as partners in intellectual or academic projects, and what can go wrong in such partnerships if they don't put the partnership above their individual needs. and 2. The common ways people make mistakes in thinking and decision making.
The book is as much about the relationship between Amos Tversky and Daniel Kahneman, as the work they did. Danny Kahneman went on to win a Nobel Prize for the work, after Amos died. Danny also wrote a book about the work, called Thinking, Fast and Slow which is surely worth reading 💯

🎧 PODCAST/WEBINAR OF THE WEEK

This episode from "GCP Podcast" talks about key findings in the 2022 DevOps report, especially in the security space. Some of the most notable include the adoption of DevOps security practices and the decreased incidence of burnout on teams who leverage security practices.

💼 OPEN JOBS OF THE WEEK

Senior DevOps Engineer @Calm
AWS, Kubernetes, Terraform
🌎 Remote, USA
Read more »

DevOps Engineer @Scaleway
Go, Ansible, Terraform
🌎 Remote, Europe
Read more »

DevOps Engineer @Hygraph
AWS, Docker, Terraform
🌎 Remote, Germany
Read more »

Hand-picked DevOps opportunities to work from home, remotely, freelance, full-time, part-time, contract and internships - Read more »

🌎 EVENTS OF THE WEEK

Building and scaling apps can get very complex, very quickly. At Deploy you'll learn, connect, and collaborate with devs and technical managers who understand the challenges of working with complex systems - Register now

Join hundreds of technical leaders at LeadDev and gain insights and learnings and expand your network. Access the tools to be more effective in your role, your organization and your career - Register now

Are you the one being paged when systems go down? Have you had “aha!” moments when reading the SRE books? Do you focus on the security pipelines at work? Come, and share your experience at Conf42: DevSecOps - Register now

🐦 TWEET OF THE WEEK