DevOps Bulletin #78: GPT3 Powered Terminal
Tags: devops, aws, kubernetes, cloud
Published: 2022-11-24 20:30:07

> _A quick, hassle-free way to stay on top of DevOps & Platform Engineering news._

## Headline Tutorials:

![Normal interactions between a Python Lambda function and two extensions](https://miro.medium.com/max/700/0*ThjKIUZbbA_OTdtx.png)

🐞 “[Implanting the Lambda execution environment](https://www.clearvector.com/blog/lambda-spy/?utm_source=devopsbulletin&utm_medium=newsletter)” — A cryptocurrency malware miner deployed by attackers as a Lambda function that ran within customers environments using stolen or leaked AWS credentials.

💸 “[How we accidentally burned $40,000 by calling recursive patterns](https://levelup.gitconnected.com/how-we-accidentally-burned-40-000-by-calling-recursive-patterns-571fe5ede90?utm_source=devopsbulletin&utm_medium=newsletter)” — To avoid recursive invocations between S3 and Lambda, its best practice to use a positive trigger, reserved concurrency and CloudWatch alarms.

🗃 “[Kubernetes snapshots: What are they and how to use them?](https://blog.palark.com/kubernetes-snaphots-usage?utm_source=devopsbulletin&utm_medium=newsletter)” — An introduction to snapshots in Kubernetes and an overview of typical usage cases. Creating PVC templates, cloning data for testing, and performing consistent backups.

🚨 “[How to implement DevSecOps in a Kubernetes cluster environment](https://medium.com/@sdevsecops/how-to-implement-devsecops-in-a-kubernetes-cluster-environment-github-actions-and-azure-devops-522bdd121e34?utm_source=devopsbulletin&utm_medium=newsletter)” — This hands-on tutorial uses kube-bench and other tools to check if the deployed Kubernetes cluster is secure by running checks against CIS Kubernetes Benchmarks.

🔒 “[Stop playing Whac-A-Mole, start using Least Privilege IAM policies](https://blog.symops.com/2022/11/10/stop-playing-whac-a-mole-start-using-least-privilege/?utm_source=devopsbulletin&utm_medium=newsletter)” — This post looks at some of the challenges of setting up least privilege in AWS IAM and how you can start locking down access to S3 resources.

🌥 “[Does Kubernetes really give you multicloud portability?](https://medium.com/digital-mckinsey/does-kubernetes-really-give-you-multicloud-portability-476270a0acc7?utm_source=devopsbulletin&utm_medium=newsletter)” — All in all, deploying to a managed Kubernetes can’t be considered fully portable (or the silver bullet for portability)

🔧 “[5 tools to auto-generate Terraform configuration files](https://www.infracloud.io/blogs/auto-generate-terraform-configuration-files?utm_source=devopsbulletin&utm_medium=newsletter)” — This blog post aims to make this transition easier by exploring the available approaches and tools for importing cloud resources that already exist on the cloud into Terraform configuration files.

👀 “[Changing times (or, why is every layoff 10–15%?)](https://blog.eladgil.com/p/changing-times-or-why-is-every-layoff?utm_source=devopsbulletin&utm_medium=newsletter)” — Reading Elad Gil’s market analysis can give you the context to understand why and how certain companies operate in today’s economy and what it might imply for your company.

## Latest open source projects

### Sidekick

![Sidekick is a live application debugger that lets you troubleshoot your applications while they keep on running.](https://miro.medium.com/max/700/0*Aupq58kVXkALiVkT)

[Sidekick](https://github.com/runsidekick/sidekick?utm_source=devopsbulletin&utm_medium=partner&utm_campaign=sidekick-opensource) is like open-source ChromeDev Tools for your backend. Collect real time data, cut your MTTR and monitoring costs with almost no overhead.

### AI CLI

![Get answers for CLI commands from GPT3 right from your terminal](https://miro.medium.com/max/700/0*ZiE0dav24JajjrKE.png)

Get answers for [CLI commands](https://github.com/abhagsain/ai-cli?utm_source=devopsbulletin&utm_medium=newsletter) from GPT3 right from your terminal. For example you could ask the following question and get the corresponding linux command “Check process running on port 3000”.

### Autograf

![Dynamically generate Grafana dashboard based on Prometheus metrics](https://miro.medium.com/max/468/0*fcP6x4_F6UGmLgIL.png)

Dynamically generate Grafana dashboard based on Prometheus metrics. Autograf generates Grafana dashboard directly from /metrics or based on a metrics matching provided selector.

### GitHub Audit Tool

![A Curated List of WebAssembly and Docker Resources](https://miro.medium.com/max/500/0*6v8wKETeqbNIVpnG.png)

A [curated list](https://github.com/collabnix/wasm-docker-better-together?utm_source=devopsbulletin&utm_medium=newsletter) of WebAssembly and Docker resources (tutorials, videos and books). Learn how to build, share, and run WebAssembly apps using Docker.

## Tweet of the week

![AWS Organization](https://miro.medium.com/max/593/0*2xp5oe_IkZZFUYuM.png)

Read the full thread [here](https://twitter.com/s0enke/status/1593928101712519172?utm_source=devopsbulletin&utm_medium=newsletter).

## Meme of the week

![Twitter & Elon Musk](https://miro.medium.com/max/450/0*Z7OK7-JZPJn92B7v.png)

I hope this summary has been useful. Remember to [subscribe to the newsletter](https://www.devopsbulletin.com/) to receive the latest DevOps trends in your inbox every week 🔥