#83: IAM Best Practices

This week's newsletter highlights AWS Lambda cost optimization by 40%, GitOps ultimate guide, automating cross-post of blogs with Lambda and Step Functions, deep-dive into WebAssembly, SQS scalability and limitations, why eBay switched to OpenTelemetry, Terraform free learning materials, what every SRE should know about Linux shell, open source projects including EKS best practices checker and Ansible ChatGPT bot and more.
I hope you enjoy this week’s newsletter! Share it with a friend or colleague if you find it helpful, or drop me an email about topics you’d like to hear about in future editions.
Merry Christmas 🎄

📖 POSTS OF THE WEEK

How to reduce 40% cost in AWS Lambda without writing a line of code!
Practical post on how to optimize the cost of an AWS Lambda processing approximately 410 million records every day.
Read more »

"The ultimate guide to GitOps with GitLab" - This eight-part tutorial series demonstrates how to use GitLab as a best-in-class GitOps tool - Read more »

"I built a Serverless app to cross-post my blogs" - Publishing blogs on several platforms (Medium, Hashnode, Dev.to, etc) can takes up a good amount of time every week. There had to be a better way - Read more »

"WebAssembly: Docker without containers!" - This article will explain what is WebAssembly, why it is relevant to the Docker ecosystem and provide some hands-on examples to try on - Read more »

"Limitations and solutions to consider while using SQS" - While SQS is a powerful and reliable service, it does have some limitations that you should consider when using it - Read more »

"Why and How eBay Pivoted to OpenTelemetry" - Learn why eBay made a crucial pivot to OpenTelemetry to better align with industry standards for Observability - Read more »

"Awesome Terraform" - Curated list of resources on HashiCorp's Terraform, including books, posts, videos and tutorials - Read more »

"What every SRE should know about GNU/Linux shell" - Despite the era of containers, virtualization, and the rising number of UI of all kinds, SREs often spend a significant part of their time in GNU/Linux shells - Read more »

🛠 PROJECTS OF THE WEEK

Hardeneks is an open source CLI that runs checks to see if an EKS cluster follows EKS best practices (Security, Reliability, Cluster Autoscaling and Networking) - Learn more »

Ansible AI is a tool based on ChatGPT that generate Ansible playbooks for any use case in seconds - Learn more »

Blink is a virtual machine for running statically-compiled x86-64-linux programs on different operating systems and hardware architectures - Learn more »

aiac is a command line tool to generate IaC templates, configurations, utilities, queries and more via OpenAI's API - Learn more »

Hurl is a command line tool that runs HTTP requests defined in a simple plain text format. It can chain requests, capture values and evaluate queries on headers and body response - Learn more »

Teetty is a wrapper binary to execute a command in a pty while providing remote control facilities. A bit like tee, a bit like script, but all with a fake tty. Lets you remote control and watch a process - Learn more »

📰 NEWSWORTHY STORIES

"AWS could bit $100 billion revenue milestone in 2023" - Read more »

"LastPass admits to severe data breach, encrypted password vaults stolen" - Read more »

"Ransomware gang abused Microsoft certificates to sign malware" - Read more »

📕 BOOK OF THE WEEK

Making Sense of Cybersecurity is a crystal-clear overview of common cyber threats written for business and technical readers with no background in security. You’ll explore the core ideas of cybersecurity so you can effectively talk shop, plan a security strategy, and spot your organization’s own weak points. By examining real-world security examples, you’ll learn how the bad guys think and how to handle live threats 🚨

🎧 PODCAST/WEBINAR OF THE WEEK

In this episode, Sebastian Bille presents his tool IAM Legend. IAM Legend is an extension for Visual Studio Code. When editing IAM policies, the tool provides auto-completion and documentation for IAM actions. IAM Legend speeds up the process of writing IAM policies following the least-privilege principle 🔒

💼 OPEN JOBS OF THE WEEK

Senior DevOps Engineer @Twist
AWS, Serverless, Terraform
🌎 Remote, anywhere
💰 $120k - $175k
Read more »

Senior Site Reliability Engineer @Chronicled
GCP, Kubernetes, Terraform
🌎 Remote, anywhere
💰 $70k - $125k
Read more »

DevOps Manager @Tron
GCP, AWS, Docker
🌎 Remote, anywhere
💰 $90k - $110k
Read more »

Hand-picked DevOps opportunities to work from home, remotely, freelance, full-time, part-time, contract and internships - See more »

🌎 EVENTS OF THE WEEK

Do you love automation, SDLC and moving at speed? Do you discuss rapid delivery with friends on a Friday night? Do you care about delivering quality software? Come and join a community of 5000+ people at Conf42.com - Register now

NDC London 2023 is a 5-day event for software developers. It offers a combination of deep-dive workshops and 60-minute conference sessions - Register now

CloudNativeSecurityCon is a two-day event designed to foster collaboration, discussion and knowledge sharing of cloud native security projects and how to best use these to address security challenges and opportunities - Register now

🐦 TWEET OF THE WEEK

😂 MEMES OF THE WEEK

A newly announced architecture is replacing microservices and serverless. Adaptive Architectures combine all previous benefits and eliminates the complexities, enabling true next-gen cloud development - L earn more

Remember to share if you enjoyed this issue!

Share

Forward

Want to sponsor an issue? Check out the Sponsor Kit

DevOps Bulletin - Digest #83: IAM Best Practices 🔒

#83: IAM Best Practices

Older messages

Digest #82: Docker Compose for Helm Charts 😁

Digest #81: ChatGPT Extension for VSCode 🙀

Digest #80: Top Announcements of AWS re:Invent 2022 😍

Digest #79: Run GitHub Actions Locally 🚀

Digest #78: GPT3 Powered Terminal 😍

You Might Also Like

Is Claude.ai worth $60 billion? 🎩

Post from Syncfusion Blogs on 01/08/2025

⚙️ Waymo's big moment

The best AI tech of CES 2025

[Guide] AWS Security Essentials in Two Steps

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

The Sequence Engineering #464: OpenAI’s Relatively Unknown Agent Framework

About-Face(book)

The Art of Reading Slowly - Why Speed Isn't Everything

🎮 5 Cheap Apple AirPlay Receiver Alternatives — Your Game Controllers Need Firmware Updates Too