ContentPosts from @matthias.reichelsdorfer..
Link
@faun shared a link, 2 months, 1 week ago

DevOps Tools Targeted for Cryptojacking

JINX-0132takes a sneaky approach. It exploits Nomad's initial slip-ups to secretly mine crypto. How? By leveraging GitHub for downloads and dodging those pesky Indicators of Compromise (IOCs). Even big players using Nomad to juggle hundreds of clients aren't safe. A simple misconfiguration and poof—..

DevOps Tools Targeted for Cryptojacking
Link
@faun shared a link, 2 months, 1 week ago

Are You Over-Engineering Your Tests? – Think Like a Tester

Over-engineering alert:Automating every last thing? Recipe for disaster. Flaky tests galore! Stick to manual edge cases and sharp, atomic checks instead of drowning in script spaghetti.Abstraction overload ahead!Chasing too much abstraction makes maintenance a headache. Keep tests clean and clear.St..

Are You Over-Engineering Your Tests? – Think Like a Tester
Link
@faun shared a link, 2 months, 1 week ago

FinOps X 2025 Cloud Announcements: AI Agents and Increased FOCUS™ Support

AWSjust decreed its new AI-infusedCost Optimization Hub. This gizmo tackles the chaos of tracking overlapping opportunities among millions of resources. Meanwhile,Google CloudunleashedForecasting Enhancements. They claim their AI now wrangles pesky outliers and wild trends, turning financial crystal..

Link
@faun shared a link, 2 months, 1 week ago

What I’ve Learned from Designing Landing Zones On Google Cloud

Cloud Foundation FabricandFASTmake Google Cloud feel more like a well-oiled machine than a hair-pulling puzzle. They slice through the setup with killer precision, laying down a rock-solid, enterprise-grade foundation. No IAM madness. No network disasters waiting to explode. Just scalable, secure co..

What I’ve Learned from Designing Landing Zones On Google Cloud
Link
@faun shared a link, 2 months, 1 week ago

Building Uber’s Multi-Cloud Secrets Management Platform to Enhance Security

Uber built a Secret Management Platform to consolidate vaults and automate secret monitoring and rotation. They use real-time and scheduled scanning to catch leaks early and reduce exposure. They also enable automatic rotation of20,000secrets per month on average, prioritizing certain types and plat..

Link
@faun shared a link, 2 months, 1 week ago

Mastering Terraform Variables: Complex Structures & Input Validation

Object variables inTerraformcrank up your code's modularity. They hand you structured, adaptable input—a game changer for scaling beasts likeEKS Nodegroupin the cloud...

Mastering Terraform Variables: Complex Structures & Input Validation
Link
@faun shared a link, 2 months, 1 week ago

AWS: Introducing an agentic coding experience in Visual Studio and JetBrains IDEs

Amazon Q Developer just turbochargedVisual StudioandJetBrains IDEswith a nimble AI sidekick. This brainy assistant patches code, assembles projects, and whips up unit tests, slashing the drudgery that usually swallows developers' days. By juggling context, parsing files, and firing off commands all ..

Link
@faun shared a link, 2 months, 1 week ago

Grafana 12 release: observability as code, dynamic dashboards, new Grafana Alerting tools, and more

Grafana 12delivers a whammy withGit SyncandDynamic Dashboards, shaking up how teams tackle observability using newexperimental toolsthat simplify workflow automation.SQL Expressionsrevolutionize your data game, enabling data mashups that once seemed impossible. Meanwhile, the upgraded table visualiz..

Grafana 12 release: observability as code, dynamic dashboards, new Grafana Alerting tools, and more
Link
@faun shared a link, 2 months, 1 week ago

Exploiting CI/CD with Style(lint): LOTP Guide

CI/CD is vulnerable toLiving Off the Pipeline(LOTP) attacks via tools like linters, formatters, build, and test tools—no need to modify workflows. Hacking depends on unexpected code execution, context files, plugins, environment variables...

Exploiting CI/CD with Style(lint): LOTP Guide
Link
@faun shared a link, 2 months, 1 week ago

Systems Correctness Practices at Amazon Web Services

AWS tapsTLA+andP languageto hammer out service correctness. Bugs quiver and deadlines whistle past with formal methods wielded like a scalpel. EnterPObserve—this tool is the wizard that conjures log validation magic between design and production. AndP? It’s the S3 whisperer, driving sudden consisten..

Systems Correctness Practices at Amazon Web Services