Weekly Links #3
Tags: weekly, devops, testing, security
Published: 2019-08-31 06:35:35

* [Tests from the crypt: Think of chaos engineering as unit testing your monitoring and alerting—or as exorcising your haunted house](https://increment.com/testing/tests-from-the-crypt/) by Tammy Butow
* [Testing the boundaries of col­labo­ra­tion](https://increment.com/testing/testing-the-boundaries-of-collaboration/) by Kent Beck
* [Scenarios using custom DSLs: Writing BDD scenarios with a simple DSL rather than Gherkin](https://lizkeogh.com/2019/08/27/scenarios-using-custom-dsls/) by Liz Keogh
* [2019 Accelerate State of DevOps Report](https://cloud.google.com/blog/products/devops-sre/the-2019-accelerate-state-of-devops-elite-performance-productivity-and-scaling) by DevOps Research and Assessment (DORA)
* [Rate-limiting strategies and techniques](https://cloud.google.com/solutions/rate-limiting-strategies-techniques)  by Preston Holmes 
* [Got microservices? Service mesh management might not be enough](https://cloud.google.com/blog/products/api-management/got-microservices-service-mesh-management-might-not-be-enough) by Greg Kuelgen
* [How Google Turned Kubernetes into a Control Plane to Manage GCP Resources](https://thenewstack.io/how-google-turned-kubernetes-into-a-control-plane-to-manage-gcp-resources/) by Janakiram MSV
* [Reasons for Cancelling a Move to Microservices](https://www.infoq.com/news/2019/08/cancelling-move-to-microservices/) by Jan Stenberg
* [Modular Monolith with DDD](https://github.com/kgrzybek/modular-monolith-with-ddd) by Kamil Grzybek
* [Don't get locked up into avoiding lock-in](https://martinfowler.com/articles/oss-lockin.html) by Gregor Hohpe
* [Modern applications at AWS](https://www.allthingsdistributed.com/2019/08/modern-applications-at-aws.html) by Werner Vogels CTO - Amazon.com 
* [Announcing etcd 3.4](https://kubernetes.io/blog/2019/08/30/announcing-etcd-3-4/) Authors: Gyuho Lee (Amazon Web Services, @gyuho), Jingyi Hu (Google, @jingyih)
* [Choosing a cloud DBMS: architectures and tradeoffs](https://blog.acolyer.org/2019/08/30/choosing-a-cloud-dbms/) by Adrian Colyer
* [Exposing microservices running in AWS EKS with a microservices/API gateway like Solo Gloo](https://medium.com/solo-io/exposing-microservices-running-in-aws-eks-with-a-microservices-api-gateway-like-solo-gloo-263651e309f8) by Christian Posta
* [Golang: Module Mirror and Checksum Database Launched](https://blog.golang.org/module-mirror-launch) by Katie Hockman
* [GopherCon 2019 - How I Write HTTP Web Services after Eight Years](https://www.youtube.com/watch?v=rWBSMsLG8po) by Mat Ryer
* [A very deep dive into iOS Exploit chains found in the wild](https://googleprojectzero.blogspot.com/2019/08/a-very-deep-dive-into-ios-exploit.html) by Ian Beer, Project Zero
* [Awesome Security Audits](https://github.com/pomerium/awesome-security-audits) by Bobby DeSimone (pomerium)
* [The JPMS Maturity Model](https://blog.codefx.org/java/the-jpms-maturity-model/) by Nicolai Parlog
* [Rabbit Holes: The Secret to Technical Expertise](http://blog.bityard.net/articles/2019/August/rabbit-holes-the-secret-to-technical-expertise.html) by Charles Ulrich
* [Unveiling Elite Developers' Activities in Open Source Projects](https://arxiv.org/abs/1908.08196) by Zhendong Wang, Yang Feng, Yi Wang, James A. Jones, David Redmiles
* [How to Secure a GraphQL API (The Complete Vulnerability Checklist)](https://leapgraph.com/graphql-api-security) by leapgraph
* [Discovering GraphQL endpoints and SQLi vulnerabilities](https://medium.com/@localh0t/discovering-graphql-endpoints-and-sqli-vulnerabilities-5d39f26cea2e) by Matías Choren
* [GraphQL abuse: Bypass account level permissions through parameter smuggling](https://labs.detectify.com/2018/03/14/graphql-abuse/) by Jon Bottarini
* [GraphQL Security Research Material](https://github.com/doyensec/graph-ql/) by Doyensec
* [Kotlin 1.3.50 released](https://blog.jetbrains.com/kotlin/2019/08/kotlin-1-3-50-released/)
* [Amazon SQS and AWS X-Ray](https://docs.aws.amazon.com/xray/latest/devguide/xray-services-sqs.html)