PC Network Inc.’s Post

Checkout the latest episode from Code To Cloud, where we discuss container image signing with notary and gatekeeper on AKS with Steve Griffith. In this episode, we explore the Notation project and its robust capabilities for signing container images, following the Notary project specification. You’ll learn how to ensure the integrity and authenticity of your container images, which is crucial for maintaining a secure software supply chain. #CodeToCloud #AKS #Containerization #azure https://lnkd.in/gBgbwE25

The best way to reuse app secrets for your API requests Application secrets are sensitive values that you shouldn't expose publicly. Examples are hard-coded credentials, API keys, and tokens from your development workflow. You want to save them in encrypted storage and inject them into production. So, how can you securely store secret values? Postman Vault allows you to store API and client secrets in an end-to-end encrypted local storage vault within Postman. Postman Vault also integrates with cloud solutions like Azure Key Vault, HashiCorp Vault, and AWS Secrets Manager. This enables you to securely reuse sensitive data in HTTP collections, environments, and API requests.

AWS AppSync recently announced new configuration options that make it easier for customers to configure limits to how their APIs can be consumed. These options allow customers to set a maximum number of resolvers per query, a maximum depth of queried data, and allows to disable introspection queries. When APIs are deployed to production, it is important to put safeguards in place to prevent misuse, intentionally or otherwise, of the system that has been built. These new configurations are in line with AppSync’s goals to provide the best developer experience for interacting with your data. In this blog, we will show how these configuration can be used with your AWS AppSync API. #AWS #AmazonWebServices #AWSBlogs #Cloud #CloudComputing #Serverless

The best way to reuse app secrets for your API requests 👇 Application secrets are sensitive values that you shouldn't expose publicly. Examples are hard-coded credentials, API keys, and tokens from your development workflow. You want to save them in encrypted storage and inject them into production. So, how can you securely store secret values? Postman Vault allows you to store API and client secrets in an end-to-end encrypted local storage vault within Postman. Postman Vault also integrates with cloud solutions like Azure Key Vault, HashiCorp Vault, and AWS Secrets Manager. This enables you to securely reuse sensitive data in HTTP collections, environments, and API requests. Learn more here: https://lnkd.in/eJyE2MQn

Today, the participants learnt how to provision infrastructure using Terraform. We set up Virtual private cloud (VPC), Subnet, security groups, internet gateway, route table, route table association, EC2, installing user data, and more. The benefit is that the code is reusable, as such, you don't have to be setting up server and infrastructure manually every time. You can easily scale up and down and automate the process. Afterwards, we will move to containerization with docket and container orchestration with Kubernetes. #devops #terraform #tech365 #Automation See less

☁️ AWS now provides an API to programmatically track free-tier usage. 🔣It provides: a. actual usage b. forecasted usage c. no data if usage is greater than the limit. d. free-tier limit Though it can be done via alerts, it is helpful to programmatically limit resource consumption based on the usage data provided and an understanding of what the amount will be after the free tier limit is reached. Once, I forgot to shut down an EC2 machine and one DocumentDB instance and the final bill was $$$. 😀 🔗 https://lnkd.in/g5Ve8-6e #devops #cloud #aws

Microservices are not the only option even if your company scales. The article I read this week is https://lnkd.in/eZW35bFB. It talks about how when faced an issue, the prime video team had to couple up their microservices for their monitoring infra. There was a paper that I read recently written by S. Ghemawat and a few other great minds at Google: “Towards Modern Development of Cloud Applications” (https://lnkd.in/eaeMQNh6). If I summarise what I got from Gemini: It focuses on the idea that developers write their applications as a single unit (logical monolith). An automated runtime would take care of distributing and running the application on the cloud infrastructure. I think issues like the one mentioned in the article(of prime video) could be prevented with this idea. There are still a few disadvantages but that could still be resolved with a few other measures. Do give it a read. #softwareengineering

🛡️ #Sentinel Amazon Web Services #S3 connector now generally available (#GA) 👉 You can use this connector to #ingest logs from several #AWS services to Sentinel using an #S3 bucket and AWS's simple message queuing service. ✔️ Amazon Virtual Private Cloud (#VPC) - VPC Flow Logs ✔️ Amazon #GuardDuty - Findings ✔️ AWS #CloudTrail - Management and data events ✔️ AWS #CloudWatch - CloudWatch logs 💡 Concurrent with this release, this connector's configuration has changed slightly for Azure Commercial Cloud customers. User authentication to AWS is now done using an OpenID Connect (OIDC) web identity provider, instead of through the Microsoft Sentinel application ID in combination with the customer workspace ID. Existing customers can continue using their current configuration for the time being, and will be notified well in advance of the need to make any changes. 👉 Read more: https://lnkd.in/dQqDJGGh #SIEM #SOAR #Multicloud

Today, I created my first audit policy in #Kubernetes. The process is quite straightforward, but can be messed up easily. Troubleshooting errors in an audit policy is very important. The API server may appear to be running perfectly fine, yet logging might not occur as expected. In such cases, it's best to check the /var/log/pods directory to view the API server logs. Any errors regarding the audit policy are noted there. To see more, I recommend looking at the documentation: https://lnkd.in/e5EmTyiZ #devops #cloud #cloudnative #tech #k8s

🚀 Amazon EKS Upgrade Insights is transforming Kubernetes upgrades with automated scans and proactive recommendations. Unleash the power for robust and secure clusters. 🌐 Dive into Cluster Insights for proactive identification of roadblocks and streamlined admin efforts. 🛡️🔐 Security is a top priority with seamless integration and easy scaling. 🚀Challenges Ahead: Understand complexities for effective navigation. 🚀 🔮 The future promises intelligent, automated, and personalized Kubernetes cluster management. Stay ahead with precise recommendations and expanded support. Click here for the full blog: https://lnkd.in/gBcKJUKa #AmazonEKS #UpgradeInsights #Kubernetes #ClusterInsights #Security #Integration #FutureTech #Expertcloudconsulting #cloud #DevOps