#85: What Every DevOps Should Learn in 2023

This week's newsletter highlights what needs to be checked before deploying a Serverless app to production, why reading academic white papers can make you a better DevOps engineer, how to leverage ChatGPT to write better code, list of tools to manage Terraform Drift, how to build secure apps in the cloud, Serverless highlights of 2022, free resources to improve your AWS skills and what you should learn as a DevOps in 2023, how to convert Kubernetes YAML manifests to Terraform HCL, CircleCI latest security breach and more.

I hope you enjoy this week’s newsletter! Share it with a friend or colleague if you find it helpful, drop me an email or send me a DM on Twitter about topics you’d like to hear about in future editions.

📖 POSTS OF THE WEEK

Serverless production readiness checklist
Before going to production, go through this checklist. The checklist spans security, backups, crisis recovery, CI/CD, and support readiness.
Read more »

"You should be reading academic computer science papers" - You read documentation and tutorials to become a better engineer, but if you really want to be cutting-edge, academic research is where it's at - Read more »

"Tools for managing Terraform Drift" - This blog compares popular tools and discusses what to look for when choosing a tool - Read more »

"2022 in Serverless" - It has been an incredible year for serverless. Let's recount some of the amazing things that happened - Read more »

"Best practices for application security in cloud-native environments" - This is Part 3 of a five-part cloud security series that covers protecting an organization’s network perimeter, endpoints, application code, sensitive data, and service and user accounts from threat - Read more »

"I scanned every package on PyPi and found 57 live AWS keys" - This post outlines how PyPi was scanned and showcases how to build a tool to automatically scan all new PyPi releases to notify AWS of potentially leaked keys - Read more »

"11 ways you can use ChatGPT to write code" - The story is not about ChatGPT taking programmers' jobs. It's not about a missing import here or a subtle mistake there. The story is how, overnight, AI gives programmers a 100x boost - Read more »

"What we do in the /etc/shadow" - Ever since the famous “Open Sesame” line from One Thousand and One Nights, humanity was doomed to suffer from the scourge of passwords - Read more »

"Why Kustomize?" - Why not helm? What's the difference between overlays and templating? - Read more »

🛠 PROJECTS OF THE WEEK

cnquery answers thousands of questions about your infrastructure, and integrates with over 300 resources across cloud accounts, Kubernetes, containers, services, VMs, APIs, and more - Learn more »

A curated list of awesome Amazon Web Services (AWS) libraries, open source repos, guides, blogs, and other resources - Learn more »

Common Fate is an open source privileged access management framework that makes requesting AWS access a breeze - Learn more »

A Kubernetes operator for declarative database schema management for various databases (GitOps for database schemas) - Learn more »

tfk8s is a tool for converting Kubernetes YAML manifests to Terraform HCL. If you want to copy examples from the Kubernetes documentation or migrate existing YAML manifests, this tool is for you - Learn more »

Krossboard is a Kubernetes Operator to handle cross-site, cross-distribution & multi-clusters Kubernetes usage tracking, analytics, and accounting - Learn more »

📰 NEWSWORTHY STORIES

"CircleCI to customers: change all secrets and API tokens NOW!" - Read more »

"Burned by layoffs, tech workers are rethinking risk" - Read more »

"AWS Inf2: A 12-Chip system for large-scale ML production" - Read more »

📕 BOOK OF THE WEEK

Podman in Action introduces the Podman container manager. The easy-to-follow explanations and examples give you a clear view of what containers are, how they work, and how to manage them using Podman’s powerful features.
Learn Podman directly from its creator, discover its exceptional security features, and start managing rootless containers that integrate easily into your systems 🚀

🎧 PODCAST/WEBINAR OF THE WEEK

What every DevOps should learn in 2023? Have you decided what you’re going to be learning in 2023? In their annual attempt to read the crystal ball, Darin and Viktor talk about the things that you need to learn or that you will probably be learning in 2023.

💼 OPEN JOBS OF THE WEEK