Join us

ContentUpdates and recent posts about Pulumi..
Link
@kala shared a link, 3 months, 2 weeks ago
FAUN.dev()

I tested ChatGPT’s backend API using RENTGEN, and found more issues than expected

A closer look at OpenAI’s API uncovers some shaky ground: misconfiguredCORS headers, missingX-Frame-Options, noinput validation, and borkedHTTP status handling. Large uploads? Boom..crash!CORS preflightrequests? Straight-up denied. So much for smooth browser support... read more  

I tested ChatGPT’s backend API using RENTGEN, and found more issues than expected
Link
@kala shared a link, 3 months, 2 weeks ago
FAUN.dev()

AI and QE: Patterns and Anti-Patterns

The author shared insights on how AI can be leveraged as a QE and highlighted potential dangers to watch out for, drawing parallels with misuse of positive behaviors or characteristics taken out of context. The post outlined anti-patterns related to automating tasks, stimulating thinking, and tailor.. read more  

Link
@kala shared a link, 3 months, 2 weeks ago
FAUN.dev()

Writing a good CLAUDE.md

Anthropic’s Claude Code now deprioritizes parts of the root context file it sees as irrelevant. It still reads the file every session, but won’t waste cycles on side quests. The message to devs: stop stuffing it with catch-all instructions. Instead, use modular context that unfolds as needed - think.. read more  

Writing a good CLAUDE.md
Link
@kala shared a link, 3 months, 2 weeks ago
FAUN.dev()

Cato CTRL™ Threat Research: HashJack - Novel Indirect Prompt Injection Against AI Browser Assistants

A new attack method -HashJack- shows how AI browsers can be tricked with nothing more than a URL fragment. It works like this: drop malicious instructions after the#in a link, and AI copilots likeComet,Copilot for Edge, andGemini for Chromemight swallow them whole. No need to hack the site. The LLM .. read more  

Link
@kala shared a link, 3 months, 2 weeks ago
FAUN.dev()

1,500+ PRs Later: Spotify’s Journey with Our Background Coding Agent

Spotify just gave its internal Fleet Management tooling a serious brain upgrade. They've wired inAI coding agentsthat now handle source-to-source transformations across repos - automatically. So far? Over 1,500 AI-generated PRs pushed. Not just lint fixes - these include heavy-duty migrations. They'.. read more  

1,500+ PRs Later: Spotify’s Journey with Our Background Coding Agent
Link
@devopslinks shared a link, 3 months, 2 weeks ago
FAUN.dev()

How when AWS was down, we were not

During the AWS us-east-1 meltdown - when DynamoDB, IAM, and other key services went dark - Authress kept the lights on. Their trick? A ruthless edge-first, multi-region setup built for failure. They didn’t hope DNS would save them. They wired in automated failover, rolled their own health checks, an.. read more  

How when AWS was down, we were not
Link
@devopslinks shared a link, 3 months, 2 weeks ago
FAUN.dev()

Collaborating with Terraform: How Teams Can Work Together Without Breaking Things

When working with Terraform in a team environment, common issues may arise such as state locking, version mismatches, untracked local applies, and lack of transparency. Atlantis is an open-source tool that can help streamline collaboration by automatically running Terraform commands based on GitHub .. read more  

Link
@devopslinks shared a link, 3 months, 2 weeks ago
FAUN.dev()

Self Hostable Multi-Location Uptime Monitoring

Vigilant runs distributed uptime checks with self-registeringGo-based "outposts"scattered across the globe. Each one handles HTTP and Ping, reports back latency by region, and calls home over HTTPS. The magic handshake? Vigilant plays root CA, handing outephemeral TLS certson the fly... read more  

Self Hostable Multi-Location Uptime Monitoring
Link
@devopslinks shared a link, 3 months, 2 weeks ago
FAUN.dev()

Test Automation Structure for Single Code Base Projects

The authors discuss the development of a new automation infrastructure post-merger, leading to a unified automation project that can handle all cultures, languages, and clients efficiently. They chose Playwright over Cypress for its improved resource usage and faster execution times, aligning better.. read more  

Link
@devopslinks shared a link, 3 months, 2 weeks ago
FAUN.dev()

How Netflix optimized its petabyte-scale logging system with

Netflix overhauled its logging pipeline to chew through5 PB/day. The stack now leans onClickHousefor speed andApache Icebergto keep storage costs sane. Out went regex fingerprinting - slow and clumsy. In came aJFlex-generated lexerthat actually keeps up. They also ditched generic serialization in fa.. read more  

How Netflix optimized its petabyte-scale logging system with
Pulumi is an open-source infrastructure-as-code platform that allows you to define, deploy, and manage cloud resources using familiar general-purpose programming languages like Python, JavaScript, Go, and TypeScript.

Pulumi represents a major shift in the Infrastructure-as-Code (IaC) landscape by moving away from proprietary domain-specific languages (DSLs) and static configuration files like YAML or JSON. Instead, it leverages the power of standard programming languages, allowing engineers to use loops, functions, classes, and existing package managers to define their cloud environments. This means you can apply software engineering best practices—such as unit testing, modularity, and CI/CD integration—directly to your infrastructure setups on providers like AWS, Azure, Google Cloud, and Kubernetes.

The platform works by utilizing a "State" mechanism similar to Terraform, where it tracks the current deployment against your desired code. When you run a Pulumi program, it builds a resource graph to determine the most efficient way to provision or update your services. Because it uses real code, it provides superior IDE support, including auto-completion and type-checking, which significantly reduces the syntax errors and "trial-and-error" deployments common with text-based configuration tools.

Furthermore, Pulumi excels in hybrid and multi-cloud environments by providing a unified workflow for both infrastructure and application delivery. It bridges the gap between developers and platform engineers, as both can now speak the same language—literally.