Alfa Connections Vietnam’s Post

In early 2023, GitHub asked more than 5,000 DevSecOps professionals to share their opinions on the current state of software development, operations, and security. Here’s what they discovered. Learn more: https://lnkd.in/ggbFRxn2

In early 2023, GitHub asked more than 5,000 DevSecOps professionals to share their opinions on the current state of software development, operations, and security. Here’s what they discovered. Learn more: https://lnkd.in/ggbFRxn2

In early 2023, GitHub asked more than 5,000 DevSecOps professionals to share their opinions on the current state of software development, operations, and security. Here’s what they discovered. Learn more: https://lnkd.in/ggbFRxn2

In early 2023, GitHub asked more than 5,000 DevSecOps professionals to share their opinions on the current state of software development, operations, and security. Here’s what they discovered. Learn more: https://lnkd.in/ggbFRxn2

Hey there Convox Community! We've got a feature highlight for you today that gives a boost to the security and compliance of your AWS Kubernetes deployments by integrating fine-grained I AM role management directly at the Pod level. Click the link below to learn more! https://lnkd.in/gR-TEA4g

Here's a quick read on ROSA GovCloud and Red Hat Insights achieving FedRAMP High Authorization. Cheers!

Taking up the time to write up some things I've noted recently in #Kubernetes #Security explorations. This time it's the kube-proxy API. Some potentially interesting info. disclosure from an unauthenticated API. Possibly the most interesting bit is that AWS decided to make it available on all interfaces on each node (not the default). They're usually pretty strict about default configs. https://lnkd.in/edk8mpYj

Managing secret information in your cloud applications is an important component. When running in cloud environments like AWS you have tools available like AWS Secrets Manager and the SSM Param Store. If you're running containers in an Elastic Kubernetes Cluster (EKS) you could take advantage of the native Kubernetes secrets construct. The problem with this is that these are not encrypted by default and lack many key features required by security standards. Using a solution like Vault from Hashicorp is a better approach in most cases. This article from Anvesh Muppeda shows how to set Vault up and use it. https://lnkd.in/eW_JeR7A

Vault integration with Kubernetes. A crucial step in DevOps life cycle. #devopsrealtime #devops #Kubernetes #devopscommunity #Terraform #HashiCorpVault

Really starting to like the look of OpenTofu. The new client-side state encryption feature just announced https://lnkd.in/eRiFvx-w looks like a feature that will push sizable amount of users from Terraform.