AWS Security Pillar
Tags: aws, devops, programming, kubernetes
Published: 2023-02-23 21:12:29

Welcome to this week’s DevOps newsletter! I’ve got a lot of exciting topics to cover, including AWS security pillar, Kubernetes dashboards, and DevOps open-source projects.

Firstly, I have a comprehensive guide to the AWS security pillar, where you can learn how to secure your AWS environment by implementing AWS security best practices and gaining a comprehensive understanding of AWS security services.

Next, we’re exploring the rise of Serverless monoliths and the best practices for running Java apps on Kubernetes. Additionally, I’m sharing an architecture for enforcing RBAC in a cloud storage system and an open-source utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. And, for those interested in Terraform, I have a preparation guide for becoming a Hashicorp Certified Terraform Associate.

Lastly, don’t miss our open-source projects of the week, including a ChatGPT-powered gym workout generator and a CLI that creates screenshots based on terminal command output. And, we’re also diving into why open-source is broken and uncovering the truth about git metrics tools. Stay tuned for all this and more in this week’s DevOps newsletter!

## Posts of the week

**🔒 “Our guide to the AWS security pillar” —** A walkthrough of the AWS Security Pillar with insights into how to manage this vital but often complicated aspect of modern architecture — [Read more »](https://theserverlessedge.com/our-guide-to-the-aws-security-pillar/?utm_source=devopsbulletin&utm_id=newsletter)

**🧐 “Platform Engineering teams done right…”** — Three reasons for the platform engineering meme: demand for tools to improve complicated platforms on Kubernetes, marketing by companies with tools to sell, and interest sparked by the Team Topologies book’s definition of how to create/manage Platform Teams — [Read more »](https://adrianco.medium.com/platform-engineering-teams-done-right-b3b3d4a8ad23?utm_source=devopsbulletin&utm_id=newsletter)

**💡 “AWS Lambda layers best practices”** — This blog post covers AWS Lambda layers basics, the pros, and cons, and recommended best practices — [Read more »](https://www.ranthebuilder.cloud/post/aws-lambda-layers-best-practices?utm_source=devopsbulletin&utm_id=newsletter)

**📊 “Kubernetes dashboards: everything you need to know”** — Kubernetes comes with its own web UI for deploying containerized applications to a cluster using wizards, troubleshooting workloads, and managing cluster resources — known as Dashboard. But there are other open-source options as well — [Read more »](https://thenewstack.io/kubernetes/kubernetes-dashboards?utm_source=devopsbulletin&utm_id=newsletter)

**🔥 “Become a Hashicorp Certified Terraform Associate — preparation guide”** — The post is intended for individuals looking to prepare or take the exam in the future. It covers tips and what you need to know to pass the exam — [Read more »](https://blog.kubesimplify.com/become-a-hashicorp-certified-terraform-associate-preparation-guide?utm_source=devopsbulletin&utm_id=newsletter)

**🔑 “An architecture for enforcing RBAC in a cloud storage system”** — This article explores a 2016 paper by Garrison et al. that presents an architecture for enforcing access control policies in a cloud storage system — [Read more »](https://pncnmnp.github.io/blogs/rbac-storage-system.html?utm_source=devopsbulletin&utm_id=newsletter)

**🧵 “Best practices for Java apps on Kubernetes”** — In this article, you will read about the best practices for running Java apps on Kubernetes. Most of these recommendations will also be valid for other languages — [Read more »](https://piotrminkowski.com/2023/02/13/best-practices-for-java-apps-on-kubernetes/?utm_source=devopsbulletin&utm_id=newsletter)

**🚀 “The rise of the Serverless monoliths”** — This post covers the evolution of meta-frameworks (Next.js and Remix) and backend as a service (Supabase, SurrealDB) — [Read more »](https://medium.com/@dbottiau/the-rise-of-the-serverless-monoliths-63d3d2d98164?utm_source=devopsbulletin&utm_id=newsletter)

**🐳 “Docker will edit host-based firewall rules for you”** — Docker would quietly add a rule to your system’s iptables to allow container port through the firewall — [Read more »](https://geoff.tuxpup.com/posts/psa_docker_edits_firewall_rules/?utm_source=devopsbulletin&utm_id=newsletter)

## Projects of the week

IaSQL is open-source software that treats infrastructure as data by maintaining a 2-way connection between a cloud account and a PostgreSQL database — [Learn more »](https://github.com/iasql/iasql?utm_source=devopsbulletin&utm_id=newsletter)

![IaSQL](https://miro.medium.com/max/1400/0*gJNMjVr4Av8tAgXb.png)

Signadot is a Kubernetes native platform that provides lightweight environments using a unique multi-tenancy model that shares resources safely. You’re able to test every pull request end-to-end in K8s and ship features 10x faster — [Learn more »](https://docs.signadot.com/docs/how-it-works/?utm_campaign=Paid%20Newsletters&utm_source=email&utm_medium=Devops%20Bulletin)

![Signadot](https://miro.medium.com/max/850/0*QpeA8DeVi3ZTyZHl.png)

Popeye is a utility that scans live Kubernetes cluster and reports potential issues with deployed resources and configurations — [Learn more »](https://github.com/derailed/popeye?utm_source=devopsbulletin&utm_id=newsletter)

![Popeye](https://miro.medium.com/max/1400/0*R6jGpZ7z6_8dfpO_.png)

A cool side project that leverages ChatGPT to build gym workouts for you based on the equipment you have at your disposal — [Learn more »](https://www.readysetcloud.io/blog/allen.helton/chatgpt-is-my-new-personal-trainer?utm_source=devopsbulletin&utm_id=newsletter)

![ChatGPT](https://miro.medium.com/max/1136/0*jtCnwGOeat9Fiwuo.png)

Keep is an open-source alerting CLI that contains everything you need to start creating Alerts. It supports all major providers (e.g. Sentry/Datadog or Slack/Pagerduty) — [Learn more »](https://github.com/keephq/keep?utm_source=devopsbulletin&utm_id=newsletter)

![Termshot](https://miro.medium.com/max/1400/0*zoUnRuor8G53JeUf.png)

Termshot takes the console output and renders an output image that resembles a user interface window. The idea is similar to what carbon.now.sh, ray.so do — [Learn more »](https://github.com/homeport/termshot?utm_source=devopsbulletin&utm_id=newsletter)

## Tweet of the week

If you’ve ever noticed dropped connection after a rolling upgrade, this [thread](https://twitter.com/danielepolencic/status/1627628028971941888) digs into the details👇🏻

![Kubernetes](https://miro.medium.com/max/1176/0*ffRy0ZEL5lx9qt3W.png)

## Meme of the week

![Meme](https://miro.medium.com/max/1400/0*1yH6LjpDm2xdTAVg.png)

I hope this summary has been helpful. Remember to [subscribe to the newsletter](https://www.devopsbulletin.com/) to receive the latest DevOps trends in your inbox every week 🔥