DevOps Bulletin #83: IAM Best Practices
Tags: aws, devops, docker, security
Published: 2022-12-30 12:22:01

> _A quick, hassle-free way to stay on top of DevOps & Platform Engineering news._

## Headline Tutorials:

![This process would fetch the file from GitHub, transform the markdown to the appropriate format, and publish it to all the different platforms.](https://miro.medium.com/max/700/0*cf5gZXqMaVqdFrCj.png)

💰 “[How to reduce 40% cost in AWS Lambda without writing a line of code!](https://medium.com/insiderengineering/how-to-reduce-40-cost-in-aws-lambda-without-writing-a-line-of-code-a3bd60d09ed1?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin)” — Practical post on how to optimize the cost of an AWS Lambda processing approximately 410 million records every day.

💡 “[The ultimate guide to GitOps with GitLab](https://about.gitlab.com/blog/2022/04/07/the-ultimate-guide-to-gitops-with-gitlab/?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin)” — This eight-part tutorial series demonstrates how to use GitLab as a best-in-class GitOps tool.

😍 “[I built a Serverless app to cross-post my blogs](https://www.readysetcloud.io/blog/allen.helton/how-i-built-a-serverless-automation-to-cross-post-my-blogs/?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin)” — Publishing blogs on several platforms (Medium, Hashnode, [Dev.to](http://dev.to/), etc) can takes up a good amount of time every week. There had to be a better way using a Serverless stack.

📦 “[WebAssembly: Docker without containers!](https://wasmlabs.dev/articles/docker-without-containers/?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin)” — This article will explain what is WebAssembly, why it is relevant to the Docker ecosystem and provide some hands-on examples to try on.

✨ “[Limitations and solutions to consider while using SQS](https://devpost.hashnode.dev/limitations-and-solutions-to-consider-while-using-sqs?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin)” — While SQS is a powerful and reliable service, it does have some limitations that you should consider when using it.

📊 “[Why and How eBay Pivoted to OpenTelemetry](https://tech.ebayinc.com/engineering/why-and-how-ebay-pivoted-to-opentelemetry/?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin)” — Learn why eBay made a crucial pivot to OpenTelemetry to better align with industry standards for Observability.

🔥 “[Awesome Terraform](https://github.com/shuaibiyy/awesome-terraform?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin)” — Curated list of resources on HashiCorp’s Terraform, including books, posts, videos and tutorials.

🧵 “[What every SRE should know about GNU/Linux shell](https://biriukov.dev/docs/fd-pipe-session-terminal/0-sre-should-know-about-gnu-linux-shell-related-internals-file-descriptors-pipes-terminals-user-sessions-process-groups-and-daemons/?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin)” — Despite the era of containers, virtualization, and the rising number of UI of all kinds, SREs often spend a significant part of their time in GNU/Linux shells.

## Latest open source projects

### Hardeneks

![Runs checks to see if an EKS cluster follows EKS Best Practices.](https://miro.medium.com/max/700/0*2LR4RT1MjYEyzYWv.gif)

[Hardeneks](https://github.com/aws-samples/hardeneks?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin) is an open source CLI that runs checks to see if an EKS cluster follows EKS best practices (Security, Reliability, Cluster Autoscaling and Networking)

### Ansible AI

![Generate Ansible playbooks with ChatGPT](https://miro.medium.com/max/700/0*R-Jqc4GXlVTPoEmH.jpeg)

[Ansible AI](https://ansible.ai/?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin) is a tool based on ChatGPT that generate Ansible playbooks for any use case in seconds.

### Blink

![tiniest x86–64-linux emulator](https://miro.medium.com/max/700/0*sSfSUMaxJjXhkVh5.png)

[Blink](https://github.com/jart/blink?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin) is a virtual machine for running statically-compiled x86–64-linux programs on different operating systems and hardware architectures.

### aiac

![Artificial Intelligence Infrastructure-as-Code Generator.](https://miro.medium.com/max/600/0*Bs7wpfJVwKR-OH_w.gif)

[aiac](https://github.com/gofireflyio/aiac?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin) is a command line tool to generate IaC templates, configurations, utilities, queries and more via OpenAI’s API.

### Hurl

![Hurl, run and test HTTP requests with plain text.](https://miro.medium.com/max/700/0*c0Fah3ISJALedQpi.png)

[Hurl](https://github.com/Orange-OpenSource/hurl?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin) is a command line tool that runs HTTP requests defined in a simple plain text format. It can chain requests, capture values and evaluate queries on headers and body response.

### Teetty

![`teetty` is a wrapper binary to execute a command in a pty while providing remote control facilities.](https://miro.medium.com/max/700/0*0zEmkhB0k6DV8ldI.gif)

[Teetty](https://github.com/mitsuhiko/teetty?utm_source=newsletter&utm_medium=email&utm_campaign=devopsbulletin&utm_content=devopsbulletin) is a wrapper binary to execute a command in a pty while providing remote control facilities. A bit like tee, a bit like script, but all with a fake tty. Lets you remote control and watch a process.

## Tweet of the week

![CI/CD back then](https://miro.medium.com/max/592/0*RTex-PTBLpchiJfE.png)

## Meme of the week

![Dev vs Ops](https://miro.medium.com/max/700/0*JgrODzSVUsnRYXL2.png)

I hope this summary has been useful. Remember to [subscribe to the newsletter](https://www.devopsbulletin.com/) to receive the latest DevOps trends in your inbox every week 🔥