Application Security, Cloud, DevOps
Introduction CIS is a renowned nonprofit organization that offers recommendations for security best practices; offerings include a bunch of guidelines for configuring & securely K8s clusters. Trivy is a comprehensive container security auditing tool that brings the power of CIS (Center for Internet Security) compliance auditing to K8s clusters. Reason to Adopt Trivy? Trivy is […]
Agile, Android, Automation Testing
In the era of agile methodologies and DevOps practices, the traditional boundaries between roles are blurring, necessitating a collaborative approach across cross-functional teams. For testers, this entails gaining proficiency in tools beyond their traditional domain, including Kubernetes—a pivotal platform for container management. Let’s explore how test engineers can harness Kubernetes to expedite application quality assessment […]
Introduction Bicep is a domain-specific language (DSL) that deploys Azure resources with declarative syntax. With a flexible syntax designed especially for Azure Resource Manager (ARM) templates, the Bicep language offers a useful way to manage Azure infrastructure installations.Bicep provides an attractive solution for environments where enterprises want to apply Infrastructure as Code (IaC) principles. It […]
Introduction AWS CodeGuru utilizes Machine Learning and Automated Reasoning to identify security and quality issues in your application code, offering guidance on addressing and resolving them. It provides a comprehensive offering of functionalities like: ● Code Review with Amazon CodeGuru Reviewer: This tool Profiler visualizes your application performance, showing you the methods that take the […]
Introduction AWS OpsWorks is a robust configuration management service designed to simplify infrastructure and application management. It automates tasks, streamlines operations, and ensures application reliability by simplifying the provisioning and configuration of resources like Amazon EC2 instances and databases. OpsWorks offers flexibility through support for Chef recipes and cookbooks, allowing users to maintain consistency in […]
Introduction GitHub Actions has become an integral part of modern software development, streamlining continuous integration and delivery processes. However, users have longed for a straightforward approval flow, similar to Azure Pipelines. It offers a simplified way to incorporate approval steps into CI/CD pipelines. This update opens doors for users to enhance workflow control. Objective The […]
Application Security, Cloud, DevOps
Introduction AWS WAF is a web application firewall that helps protect your web applications or APIs against common web exploits by monitoring and filtering the HTTP and HTTPS requests that reach your application. It allows you to create rules to block, allow, or monitor (count) web requests based on conditions that you define. AWS WAF […]
Introduction One of the critical elements for production uptime is Monitoring and Alerts. Irrespective of the infrastructure types such as EC2 Servers, Serverless, containers, or microservices. There will always be observability needs. There are a lot of tools and software in this Observability market. However, this article focuses on cloud platform tools, such as AWS […]
Introduction Kubernetes is a powerful tool for managing containerized applications. It helps us to automate the deployment, scaling, and management of our applications in containers, which are like lightweight, standalone packages for software. In the market, multiple tools are available to set up Kubernetes clusters locally (on our host machines), like Minikube, Microk8s, Kind (Kubernetes […]