Digest #167: 37signals Ditches AWS, Kubernetes Build-vs-Buy, Capital One’s Serverless Patterns, npm Malware Hits Thousands, and GitHub Actions Hardening

$10M AWS exit lessons, real-world Lambda at scale, malicious npm packages, Jenkins attack paths, CI/CD security tips, OPA with Terraform, and open-source tools from Docker2exe to Cloud Snitch.

Welcome to this week’s edition of the DevOps Bulletin!

Kubernetes is powerful—but maintaining it yourself can be a full-time job. This week, we’re sharing a free whitepaper to help you evaluate the “build vs. buy” decision for Kubernetes infrastructure management. If you’ve ever wondered whether your team should keep operating clusters in-house or switch…