2 min read

Here's the recording from our DevOps “Office Hours” session on 2022-03-23.

We hold public “Office Hours” every Wednesday at 11:30am PST to answer questions on all things DevOps/Terraform/Kubernetes/CICD related.

These “lunch & learn” style sessions are totally free and really just an opportunity to talk shop, ask questions and get answers.

Register here: cloudposse.com/office-hours

Basically, these sessions are an opportunity to get a free weekly consultation with Cloud Posse where you can literally “ask me anything” (AMA). Since we're all engineers, this also helps us better understand the challenges our users have so we can better focus on solving the real problems you have and address the problems/gaps in our tools.

---

[00:00:00] Intro
[00:01:27] Okta Support Engineer Account Compromised
https://twitter.com/jschauma/status/1506459390160871432?s=21
[00:05:32] List of vendors that do not allow IMDSv2 enforcement
https://github.com/SummitRoute/imdsv2_wall_of_shame
https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/
[00:08:33] Interesting Terraform Providers for TFVars, dotenv, s3 downloads
https://github.com/innovationnorway/terraform-provider-tfvars
https://github.com/jrhouston/terraform-provider-dotenv
https://github.com/nicolai86/terraform-provider-aws-download
[00:15:19] New Cloud Posse Lambda Function module
https://github.com/cloudposse/terraform-aws-lambda-function
[00:20:07] GitHub Actions: Restrict self-hosted runner groups to specific workflows
https://github.blog/changelog/2022-03-21-github-actions-restrict-self-hosted-runner-groups-to-specific-workflows/
[00:24:07] What are the reasons to not deploy Lambdas via Terraform? (Currently doing so, is quite a bit of work)
[00:32:47] aws provider maintainers migrated the new aws s3 bucket changes to 3.x
https://github.com/hashicorp/terraform-provider-aws/releases/tag/v3.75.0
[00:40:55] How are folks approaching interviewing candidates for DevOps positions nowadays? What questions do you ask? What has worked and what hasn’t?
[00:59:22] Outro