Digest #161: GitLab 300GB Loss, DIY Data Center, OAuth Attacks, Netflix AWS Security, Docker Hub Limits & More!

Simple news and easy guides on cloud disasters, OAuth threats, Docker limits, Netflix’s AWS security tips, Terraform tricks, Azure pricing, and cool open source devtools.

Welcome to this week’s edition of the DevOps Bulletin!

First, see how GitLab lost 300GB of production data and look into what it takes to build your data center. We also share the findings from six months of research into OAuth application attacks, update you on Docker Hub’s new limits, explain Cortex Cloud’s merge with Prisma Cloud, and show how monday.com is managing its trace volume.

Discover how to secure thousands of AWS accounts in our featured podcast without slowing down developers from Netflix’s cloud security engineer.

In the tutorials section, learn how to replace Docker Compose with Quadlet for servers and organize Terraform code for better scalability to refactoring code with GitHub Copilot, understand Azure Data Transfer pricing, fix AWS Serverless image handlers, set up cross-region disaster recovery on AWS, explore multi-cluster fault tolerance with k8gb, storing Terraform state in Azure, and even a look at HTTP3.

We also highlight some cool open-source devtools:
• Subtrace – like Wireshark for Docker, letting you see all network requests.
• Fly-to-podman – a handy script to switch from Docker to Podman.
• ExtensionHound – a tool to track which Chrome extensions make suspicious DNS requests.

All this and more in this week’s DevOps Bulletin—don’t miss out!

Newsworthy Stories

• How GitLab lost 300GB of production data

• So, you want to build your own Data Center

• Six months of researching OAuth Application attacks

• Docker new Hub usage and limits

• Cortex Cloud merges the next version of Prisma Cloud

• Managing trace volume at monday.com

Podcast of the week

Tutorials of the week

• Replace Docker Compose with Quadlet for servers

• Organizing Terraform code for scalability and maintainability

• How to refactor code with GitHub Copilot

• A guide to Azure Data Transfer pricing

• Abusing AWS Serverless image handler

• Cross-region DR of your databases on AWS

• Exploring multi-cluster fault tolerance with k8gb

• How to store Terraform state in Azure

• HTTP3, 2, 1

Projects of the week

• Kaneo is an open-source project management platform focused on simplicity and efficiency.

• Subtrace is Wireshark for your Docker containers. It lets devs see all incoming and outgoing requests to resolve production issues faster.

• Fly-to-podman is a small bash script that helps you migrate from Docker to Podman.

• ExtensionHound helps track which Chrome extensions are making suspicious DNS requests.

Meme of the week

If you have feedback to share or are interested in sponsoring this newsletter, feel free to reach out via LinkedIn, or simply reply to this email.