teleren/devto huggingface dataset:
AWS Inspector
Tags: aws, cloud, devops, security
Published: 2023-05-19 14:15:23

**Anotações sobre AWS Inspector para ajudar na preparação das certificações AWS.**

Até o momento as anotações são para as certificações abaixo:

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/se0sqtegn424nami6rz8.png)

- [Link oficial](https://aws.amazon.com/pt/inspector/)
- [FAQ](https://aws.amazon.com/inspector/faqs/)

---

##**Definição do fornecedor**
_Amazon Inspector é um serviço de avaliação da vulnerabilidade da segurança que ajuda a melhorar a segurança e a conformidade de seus recursos da AWS. 
O Amazon Inspector **avalia automaticamente os recursos para ver se existem vulnerabilidades ou desvios das práticas recomendadas e produz uma lista detalhada das descobertas de segurança priorizadas pelo nível de gravidade**._

---


##**Anotações gerais**

- **Analisa vulnerabilidades**
- Para escanear o Target, tem que ser via TAG
- Avalia automaticamente os aplicativos quanto à exposição, vulnerabilidades e desvios das práticas recomendadas
- Ele ajuda a testar a acessibilidade de rede de suas instâncias do Amazon EC2 e o estado de segurança de seus aplicativos em execução nas instâncias
- Descoberta automatizada e verificação contínua que fornece descobertas de vulnerabilidade quase em tempo real
- **Realiza verificações nas instâncias EC2 em relação a modelos de segurança**
- Agente AWS na EC2
- Free trial for 15 days
- Severity Level (_High/Medium/Low/Informational_)
- Scanner em ECR imagens

---
##**Baselines**
- CVE - Commom Vulnerabilities & Exposures
- CIS Benchmarks
- Security Best Praticies
- Network Reachability

---


##**Agente AWS na EC2**
[Installing Amazon Inspector Classic agents](https://docs.aws.amazon.com/inspector/v1/userguide/inspector_installing-uninstalling-agents.html)

---


##**2 tipos de assessments**

- Network Assessments
- Agent opcional

---


**Host Assessments**

- Precisa de agents (SSM Agent)

---
##**Referências**
- [Tutorial DOJO - Amazon Inspector](https://tutorialsdojo.com/amazon-inspector/)
AWS Security Hub
Tags: cloud, security, aws, devops
Published: 2023-05-19 14:15:05

Anotações sobre AWS Security Hub para ajudar na preparação das certificações AWS.

Até o momento as anotações são para as certificações abaixo:


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/126bl8r5j7pgendp05ta.png)

- [Link oficial](https://aws.amazon.com/pt/security-hub/?nc=sn&loc=0)

---



##**Definição do fornecedor**
_O AWS Security Hub é um serviço de gerenciamento de procedimentos de segurança na nuvem que realiza verificações de práticas recomendadas de segurança, agrega alertas e permite a correção automatizada._

---
##**Anotações gerais**

- Coleta dados se segurança
- Organiza e prioriza
- Visualiza os findings (_High,Medium,Critical,Low_)
- Compliance checks
- Pode habilitar em todas as contas
- **Recebe Findings de ferramentas de terceiros**
- **Verificações automáticas e padrão CIS AWS Foundation e PCI DSS**
- Tem que habilitar o AWS Config

---


##**Recebe dados do recursos**

- AWS IAM Access Analyzer
- AWS GuardDuty
- AWS Inspector
- AWS Macie
- AWS Firewall Manager

---
##**CloudWatch Events**

- SIEM
- Notification
- Chat
- Lambda

---


##**Automated checks - habilita durante o setup**

- PCI-DDS
- CIS AWS Foundation (Veem marcada como padrão)
- Ambas podem ser desmarcadas

---


##**Integra com**

- AWS Lambdas
- CloudWatch Events
- Guardduty
- Inspector
- Macie
- IAM Access Analizer
- AWS Systems Manager
- AWS Firewall Manager
- AWS Partner Network Solutions

##**Referências**

- [Nine AWS Security Hub best practices](https://aws.amazon.com/blogs/security/nine-aws-security-hub-best-practices/)
- [Padrões e controles de segurança em AWS Security Hub](https://docs.aws.amazon.com/pt_br/securityhub/latest/userguide/securityhub-standards.html)
How have you incorporated AI into your day-to-day work, if at all?
Tags: openai, gpt4, discuss
Published: 2023-05-19 14:13:33

---
title: How have you incorporated AI into your day-to-day work, if at all?
published: true
description: 
tags: openai, gpt4, discuss
# cover_image: https://direct_url_to_image.jpg
# Use a ratio of 100:42 for best results.
# published_at: 2023-05-19 14:12 +0000
---
Amazon Athena
Tags: cloud, aws, devops, security
Published: 2023-05-19 14:11:58

Anotações sobre o Amazon Athena para ajudar na preparação das certificações AWS.
Até o momento as anotações são para as certificações abaixo:


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/22458ujav2h4dzne8iec.png)

- [Link oficial](https://aws.amazon.com/athena/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc)

---

##**Definição do fornecedor**
_O Amazon Athena é um serviço de consultas interativas que facilita a análise de dados no Amazon S3 usando SQL padrão._


---

##**Anotações gerais**

- Utiliza diretamente o S3 Bucket
- Usa Presto e Apache Hive
- Serveless
- SQL Language

---

##**Casos de uso**

- BI
- Analytics
- Report and Analyze
- **Analise de logs vindos do VPC FlowLogs, CoudTrail, CloudWatch Logs salvos no S3**

---

##**Support**

- CVS
- JSON
- ORC
- AvroParquet
Amazon Macie
Tags: cloud, aws, security, devops
Published: 2023-05-19 14:11:04

**Anotações sobre o Amazon Macie para ajudar na preparação das certificações AWS.**

Até o momento as anotações são para as certificações abaixo:

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/se0sqtegn424nami6rz8.png)

- [Link oficial](https://aws.amazon.com/pt/macie/)
- [FAQ](https://aws.amazon.com/pt/macie/faq/)

##**Definição do fornecedor**
_O Amazon Macie é um serviço de segurança e privacidade de dados totalmente gerenciado que usa machine learning e correspondência de padrões para descobrir e proteger seus dados confidenciais na AWS._


##**Anotações gerais**

- Usa machine learning
- Usa NLP
- Dashboards
- Pode analisar logs CloudTrail
- Pode criar um job para analise pontual ou agendada
- **Analisa dados no S3**
- PCI-DSS
- Dados sensíveis
- **Utiliza _expressões regulares_ para descobertas customizadas**
- Pode enviar Findings para Jira ou Slack
- Detecta automaticamente uma lista grande e crescente de tipos de dados confidenciais, incluindo informações pessoalmente identificáveis _**(PII), como nomes, endereços e números de cartão de crédito**_. 

---

##**PII data**

- Personally Identifiable Information
- Home address, e-mail, Driver Licence


---

##**Classificação dos dados**

- Por tipo de conteúdo
- Por Tema
- Por extensão arquivos
- Por Expressão Regular

---
##**Using managed data identifiers in Amazon Macie** 
[Documentação oficial](https://docs.aws.amazon.com/pt_br/macie/latest/user/managed-data-identifiers.html)

- Pode criar uma identificação customizada(Customer Data Identifiers)

---
##**Referências**
- [Tutorial DOJO - Amazon Macie](https://tutorialsdojo.com/amazon-macie/)
Augmented Reality in Today and Tomorrow
Published: 2023-05-19 14:09:26

**AR Today: Practical Applications in Diverse Industries**

AR has gained some traction in gaming, retail, education, and healthcare sectors, demonstrating limited impact. Pokémon Go, for instance, allowed users to encounter virtual creatures in real-world environments, creating a temporary frenzy. In retail, AR enables customers to virtually try on clothes or visualize furniture placements, adding a touch of novelty to the shopping experience. Similarly, AR offers educational institutions the opportunity to supplement traditional teaching methods with interactive and immersive learning experiences. In healthcare, AR shows promise for improving diagnoses, surgical planning, and training simulations.

**Technological Advancements and AR Adoption**

Recent technological advancements have contributed to the slow but steady growth of AR. Devices such as smart glasses and headsets offer a moderately immersive experience, though they have not gained widespread popularity. Advancements in computer vision algorithms and machine learning techniques have led to modest improvements in object recognition, spatial mapping, and virtual overlays. Additionally, the integration of 5G networks, Internet of Things (IoT), and cloud computing has facilitated limited real-time data processing and connectivity for AR applications.

**Challenges and Considerations for AR**

As with any emerging technology, AR faces a range of challenges and considerations. Privacy concerns related to data collection and usage have raised skepticism among users. The limited battery life of AR devices, constrained field of view, and high costs have hindered widespread adoption. These hurdles must be addressed to make AR more accessible and practical for everyday use.

**AR's Future: Potential Applications and Evolving Landscape**

Looking ahead, the future of AR remains uncertain. The practical applications of AR in industries like automotive, tourism, and remote collaboration hold potential but are yet to gain significant traction. AR-driven heads-up displays in cars may provide navigational assistance, while interactive tours and historical reconstructions may offer niche experiences for travelers. Additionally, the concept of the metaverse, a virtual universe where users can interact and engage with one another, has been discussed, but its implementation and broader implications are still uncertain.

**Conclusion**

Augmented reality continues to evolve and find its place in various industries. While it has showcased limited applications in gaming, retail, education, and healthcare, widespread adoption and substantial impact remain elusive. Technological advancements, along with addressing privacy concerns and usability limitations, are key to driving the future growth of AR. As we cautiously navigate this space, only time will tell whether augmented reality will truly transform our everyday lives or remain a niche technology for specific applications.
Think OUTSIDE the Container
Tags: serverless, cloud, container, somod
Published: 2023-05-19 14:03:28

With the latest news of Amazon Prime moving from serverless to a container, there are still many use-cases where serverless is better.

Serverless is best suited for use-cases where the request rate is not too high. Many applications fall under this category. 
For example

- Enterprise applications, which are used by employees within an organization. 
- Customer Review Apis in an ECommerce platform.
- Forgot password Apis
- Update UserProfile Apis

Moving such use cases to serverless saves money by paying only for the used resource.

Though from an infrastructure point of view, serverless is a better option for many scenarios. There is still a problem with developing and maintaining the code for serverless applications. SOMOD helps developers better organize serverless applications. 

Think outside the containers and try https://somod.dev for your serverless applications.
RSA Conference 2023: DevSecOps and The Future Of Security
Tags: cybersecurity, rsac, security, conference
Published: 2023-05-19 13:59:29

Author's note:
Due to Dev.to continually issuing errors for having 'too many members' listed in the post, I can only post a few paragraphs of this post.  
To read the full recap with all the links please visit: 
[https://blog.gitguardian.com/rsa-conference-2023-devsecops-and-the-future-of-security/](https://blog.gitguardian.com/rsa-conference-2023-devsecops-and-the-future-of-security/)


----
To say that the RSA Conference is one of the largest cybersecurity conventions in the world would be an understatement. This year the event attracted 40,000 participants. Tens of thousands of individuals showed up to learn about the latest updates in cybersecurity and hundreds of presenters came to impart their knowledge. The expo floor alone held over 600 vendors, from giants like Cisco and VMWare, long-established platform companies like Google Cloud and Trellix, to growing players like GitGuardian and Wiz.

The security community spirit really shone through as we navigated the more than 350 possible sessions, summits, and villages that make up the event. We also had a lot of fun, getting to attend more after-parties than we can remember and seeing celebrity guest appearances from folks like Eric Idle of Monty Python, Superman Dean Cain, and Doc Brown himself, Christopher Lloyd.

It would be impossible to try and cover everything in one post, so here are just a few highlights from [RSAC 2023](https://www.rsaconference.com/).


## RSAC - Larger Than You Think

This recap only scratches the surface of all that went on at RSAC. With so many attendees, sessions, and conversations over 4 short days, it would be impossible to capture more than a small percentage of what happened in this post. For example, I did not even dig into the AppSec Sandbox exercise that GitGuardian ran for three days of the event...that is the story for another post.

GitGuardian was proud to be a part of this legendary event. If you did not get the chance to go to RSAC or did not manage to make it to our booth, we would be glad to connect with you to tell you about our secrets detection platform and our new Honeytoken module. Always feel [free to reach out](https://www.gitguardian.com/contact-us).
AWS VPC Peering
Tags: cloud, aws, devops, security
Published: 2023-05-19 13:59:09

**Anotações sobre o AWS VPC Peering para ajudar na preparação das certificações AWS.**

Até o momento as anotações são para as certificações abaixo:

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/se0sqtegn424nami6rz8.png)

- [Link oficial](https://docs.aws.amazon.com/pt_br/vpc/latest/peering/what-is-vpc-peering.html)

**Anotações gerais**

- Conecta SEMPRE 2 VPCs
- Não é possível criar uma conexão de emparelhamento de VPC entre VPCs que tenham blocos CIDR IPv4/IPv6 coincidentes ou sobrepostos. **Overlapping**
- Você não pode ter mais de uma conexão de emparelhamento de VPC entre as duas mesmas VPCs ao mesmo tempo.
- **Não é transitivo**, deve-se SEMPRE fechar o peer entre as vpcs
- **Pode ser entre regiões**

**Várias conexões de emparelhamento de VPC**

- O diagrama a seguir é um exemplo de uma VPC emparelhada com duas VPCs diferentes. 
- Existem duas conexões de emparelhamentos da VPC: **VPC A** é emparelhada com a **VPC B** e a **VPC C**. 
- A **VPC B** e **VPC C** não são emparelhadas e você não pode usar a VPC A como ponto de trânsito para emparelhamento entre a **VPC B** e a **VPC C**.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/l7ql42j17a662kgfdr67.png)




![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/gfmryhullcv5mciq0xz6.png)





**Links importantes**

- [VPC peering limitations](https://docs.aws.amazon.com/vpc/latest/peering/vpc-peering-basics.html#vpc-peering-limitations)
The Nightmare of Hybrid App Development: Why Native Apps Reign Supreme? ✨
Tags: ios, android, reactnative, flutter
Published: 2023-05-19 13:47:08

In a world where efficiency and seamless user experience reign supreme, native apps emerge as the undisputed champions, leaving hybrid apps gasping for air. Prepare to dive into the treacherous waters of hybrid development, where compromise and limitations lurk around every corner. Unleash the dark secrets that haunt the hybrid realm and discover why native apps have solidified their reign, towering over the feeble attempts of their hybrid counterparts. Buckle up, because this rollercoaster ride through the realm of app development is not for the faint of heart!

## Native Vs Hybrid: What To Choose?
**What is Hybrid App?** A hybrid app is compatible with multiple operating systems like Android, iOS, Microsoft, and others. Built with cross-platform frameworks like React, Ionic, Xamarin, and fewer codes, Hybrid apps can be accessed through a web browser and can be downloaded from app stores.

**What is a Native App?** A native app can be defined as a mobile app that is dedicated to one platform or mobile operating system. Native apps are developed and written explicitly for one OS only, which means native apps developed for Android won’t work for iOS and vice versa.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/sbrybjkrr3mnyvmrcpf5.png)

Additionally, native apps don’t work on browsers and can be downloaded from the related app stores only. The native apps are developed to work within a particular environment compatible with the specified mobile operating system and platform. Native app’s code is written exclusively for the specific OS. In general, Java Development Kit is used for developing a native app for Android while a tool like iOS SDK or Swift is used for creating a native app for iOS.

We can’t say that one app can overdo another in terms of features, technology, and performance. Because the difference between a hybrid and a native app is almost blurred. The superiority of hybrid apps and native can be judged by the business stakeholder depending upon the goal, objectivity, and nature of the business or service.

Consider the case of a popular e-commerce platform that opted for hybrid app development in a bid to save time and resources. The app’s functionality suffered greatly, resulting in frequent crashes, sluggish navigation, and a frustrating user interface. Users quickly grew weary of the app’s inadequacies, leading to plummeting ratings, negative reviews, and ultimately, a catastrophic loss of customers.

**Read Continue:** https://bit.ly/3pMnDBE 🚀
Playwright With JavaScript Tutorial.
Tags: testing, playwright, microsoft, qa
Published: 2023-05-19 13:42:09

Here is Latest blog on ["Playwright With JavaScript Tutorial: A Complete Guide"](https://dzone.com/articles/playwright-javascript-tutorial-a-complete-guide)

▶️ In this tutorial, you will learn how to write automated tests and perform browser actions using JavaScript. Playwright is a powerful tool that supports multiple web browsers, including Chrome, Firefox, and Safari, allowing you to test your web applications across different environments.

▶️ The tutorial covers various topics such as installation, setting up a project, navigating web pages, interacting with elements, handling forms etc..

▶️ Additionally, the tutorial will cover more advanced topics :
1. API Testing with Playwright JavaScript
2. Visual Testing with Playwright JavaScript
3. Accessibility Testing with Playwright JavaScript
4. Component Testing with Playwright JavaScript
ChatGPT App Comes to iOS
Tags: chatgpt, ai, news
Published: 2023-05-19 13:35:11

Hey all! Big news. **The official ChatGPT app has come to iOS!** Yesterday, [OpenAI released the app for Apple’s iOS operating system](https://openai.com/blog/introducing-the-chatgpt-app-for-ios). No Android app yet, however. The app is 100% free, as well as being without ads. 

Here is the description of the app in the Apple App Store (click [here](https://apps.apple.com/us/app/openai-chatgpt/id6448311069) to see the app in the apple app store online): 

“Introducing ChatGPT for iOS: OpenAI’s latest advancements at your fingertips.


This official app is free (no ads!), syncs your history across devices, and brings you the newest model improvements from OpenAI.

With ChatGPT in your pocket, you’ll find:

· Instant answers
· Tailored advice
· Creative inspiration
· Professional input
· Personalized learning

Join millions of users and try out the app that’s been captivating the world. Download ChatGPT today.”

The app will open up a wide range of new tools for any Apple User. The app has been in development for months and advertises many tools that are not available on any other smartphone AI app. So, in conclusion, this is going to be a good tool for users of ChatGPT or developers on the go. 

This is TCG, signing off.
DDoS - Distributed Denial of Service
Tags: aws, cloud, devops, security
Published: 2023-05-19 13:06:29

**Anotações sobre DDoS - Distributed Denial of Service na AWS para ajudar na preparação das certificações AWS.**

Até o momento as anotações são para as certificações abaixo:

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/se0sqtegn424nami6rz8.png)

- [Link oficial](https://aws.amazon.com/pt/shield/ddos-attack-protection/)

##**O QUE É UM ATAQUE DDOS?**
_Um ataque de Negação de serviço (DoS) é uma tentativa mal-intencionada de afetar a disponibilidade do sistema alvo, como um site ou aplicativo, para usuários finais legítimos. Normalmente, os atacantes geram grandes volumes de pacotes ou solicitações, o que acaba sobrecarregando o sistema de destino. No caso de um ataque de Negação distribuída de serviço (DDoS), o atacante usa várias origens comprometidas ou controladas para gerar o ataque._

_Em geral, os ataques DDoS podem ser segregados pela camada do modelo Open Systems Interconnection (OSI) que eles almejam. **São mais comuns nas camadas de Rede (camada 3), Transporte (camada 4), apresentação (camada 6) e Aplicativo (camada 7).**_


##**AWS Services**

- AWS Shield
- Amazon CloudFront
- Amazon Route53
- AWS WAF
- ELB
- VPC e Security Group

##**Tipos de Ataques**

- Amplification
- Reflection

##**Como minimizar o ataque**

- Minimize a área do ataque (SQS, Elastic Beanstalk)
- Use jumpbox/bastion host
- Escalar ambiente


##**Links importantes**

- [AWS Best Practicies for DDoS Resiliency](https://docs.aws.amazon.com/pt_br/whitepapers/latest/aws-best-practices-ddos-resiliency/welcome.html)
- [AWS DDoS Resiliency – Best Practices – Whitepaper](https://jayendrapatil.com/aws-ddos-resiliency-best-practices-whitepaper-overview/)
- [AWS Shield Tutorial | AWS Shield Advanced DDOS mitigation theory and hands-on](https://www.youtube.com/watch?v=BDeCVOpCsVo)
- [Building DDoS resilient applications using AWS Shield - AWS Online Tech Talks](https://www.youtube.com/watch?v=ZeT5_ZfXMPY)
- [AWS re:Invent 2016: Mitigating DDoS Attacks on AWS: Five Vectors and Four Use Cases (SEC310)](https://www.youtube.com/watch?v=w9fSW6qMktA)
SOA and its language: BPEL
Tags: webdev, beginners, coding, architecture
Published: 2023-05-19 13:31:13

**BPEL**

An XML-based language called BPEL (Business Process Execution Language) enables web services, APIs, and human procedures in a service-oriented architecture (SOA) to communicate with one another and share data in a business workflow.


**Orchestration versus Choreography**

Web services can be combined in two ways:

- Orchestration

- Choreography

A central process (which could be another Web service) takes control of the associated Web services in orchestration, which is typically used in private business processes, and organises the execution of various activities on the Web services engaged in the operation. 


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/40hfsiqee0qckl2zq8vc.png)


In contrast, there is no single coordinator for choreography. Instead, every Web service taking part in the choreography is aware of exactly when to carry out its actions and who to engage with.


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/9n868mp6ypuzur6xjkfj.png)

Conclusion

In the past, many companies developed and operated business operations using a single, enormous monolithic program. These would frequently deteriorate and be challenging to maintain.

Many firms are now increasingly handling business tasks using smaller web services or microservices in response to these difficulties. To enable various services to collaborate and work towards a single objective, BPEL serves as the binding agent or the common language.