DEVOPS WEEKLY
ISSUE #546 - 13th June 2021

Asset management and tips for moving into information security, as well reducing cloud network transfer costs and tips for Prometheus, JVM and PostgreSQL users.


StackHawk sponsors Devops Weekly
============================

Join the GraphQL Security Testing Learning Lab on June 29 at 9 AM PT. Learn how to run automated security testing against your GraphQL APIs so you can find and fix vulnerabilities fast.

http://sthwk.com/graphql-learninglab


News
====

A post on the importance of asset management in relation to good cyber security health.

https://www.ncsc.gov.uk/blog-post/asset-management-for-cyber-security


A large infrastructure is likely to have hugely complex network traffic flow.This post describes a state-of-the-art eBPF system for providing network insight at scale.

https://netflixtechblog.com/how-netflix-uses-ebpf-flow-logs-at-scale-for-network-insight-e3ea997dca96


The way some cloud services work, internal data transfer costs can quickly escalate. This post looks into minimising cross-region container registry costs using a local cache.

https://lambda.grofers.com/reducing-data-transfer-costs-with-a-docker-registry-based-cache-8f93d7e561f3


An introduction to extending Prometheus monitoring systems with Thanatos.

https://thesaadahmed.medium.com/thanos-monitoring-with-prometheus-and-grafana-843ed231c8a6


An opinionated list of 50 things you should learn to work in information security. Lots of cross-over with good security knowledge for systems administrators too.

https://www.netmeister.org/blog/infosec-competencies.html


A good list of places to get help or learn more about PostgreSQL.

https://xzilla.net//blog/2021/Jun/Where-To-Get-Postgres-Help-Online.html


If you’re running Java applications then you need to understand how to get metrics from the JVM. This post describes the critical JVM metrics available via JMX like memory usage, garbage collection, and thread counts.

https://sematext.com/blog/jvm-metrics/


Tools
=====

A set of best practices for AWS Serverless applications available for testing your infrastructure as code as plugins for cfn-lint and tflint.

https://github.com/awslabs/serverless-rules



If you received this email directly then you're already signed up, thanks! If however someone forwarded this email to you and you'd like to get it each week then you can subscribe at http://devopsweekly.com

--

You opted in for Devops Weekly at http://devopsweekly.com

You can always unsubscribe by visiting https://devopsweekly.us2.list-manage.com/unsubscribe?u=b6635e37e35fa5eff0c2a947a&id=a63f24d068&e=[UNIQID]&c=ac17fa1bfe

If you have other queries you can contact the list maintainer at gareth@morethanseven.net

Our mailing address is 43 Gwydir Street, Cambridge, UK, CB1 2LG