DEVOPS WEEKLY ISSUE #630 - 22nd January 2023

Thinking of all the folks at Microsoft, Google and other companies laid off over the last week.

StackHawk sponsors Devops Weekly

Experience automated security testing without the hassle of connecting your own app or configuring an environment! Follow the Tutorial to try out StackHawk and explore a world where security becomes an accelerator, not a blocker.
https://sthwk.com/tutorial

News

An excellent short post on complex systems failure, in particular looking at the impact of small mistakes and the unsatisfactory nature of blaming them for large failures.
https://surfingcomplexity.blog/2023/01/15/a-small-mistake-does-not-a-complex-systems-failure-make/

A look at the various ways of accessing AWS ECS, and importantly how to secure them.
https://blog.symops.com/2023/01/18/ecs-access/

A great question, what’s the right user experience for an expired certificate? A good reminder about the importance of automated renewals.
https://emilymstark.com/2023/01/16/whats-the-right-ux-for-an-expired-certificate.html

An interesting post from AWS on fairness in multi-tenant systems, in particular looking at rate limiting evolution.
https://aws.amazon.com/builders-library/fairness-in-multi-tenant-systems/

How do you get started with developing in Java? This post provides a nice opinionated introduction to the large Java ecosystem.
https://www.morling.dev/blog/getting-started-with-java-development-2023/

A walkthrough of how to build a container image to run on AWS Lambda using AWS CDK.
https://www.ranthebuilder.cloud/post/build-aws-lambda-container-image-with-aws-cdk

Events

PlatformCon is back, a 2 day virtual conference coming up on the 8th and 9th of June. A call for proposals is open now, looking for talks on culture, tech, impact and stories.
https://sessionize.com/platformcon-2023/
https://platformcon.com/

Tools

PolarStreams is a lightweight, elastic, Kubernetes-native event streaming system. It acts as a persistent buffer between services providing at-least-once delivery guarantees.
https://github.com/polarstreams/polar

Open Threat Model (OTM) defines a schema for defining the threat model of any system. Would be interesting to see tools built around this.
https://github.com/iriusrisk/OpenThreatModel