DevOps "Office Hours" (2025-08-20)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have. You can register here: https://cloudposse.com/office-hours Join the conversation: https://slack.cloudposse.com/ Find out how we can help your company: https://cloudposse.com/quiz https://cloudposse.com/accelerate/ Learn more about Cloud Posse: https://cloudposse.com https://github.com/cloudposse https://sweetops.com/ https://newsletter.cloudposse.com https://podcast.cloudposse.com/ #officehours,#cloudposse,#sweetops,#devops,#sre,#terraform,#kubernetes,#awsdevops Timestamps: [00:00:00] Intro [00:01:11] Announcements [00:01:18] Microsoft’s Copilot Studio Agents Coerced to Spill The Beans (CRM data, secrets, etc) - DEFCON https://www.linkedin.com/posts/michaelbargury_powerpwn-defcon-bhusa-activity-7359943047373111296-lkBu/ [00:02:57] Prompt injection: A visual, non technical primer for ChatGPT users https://www.linkedin.com/pulse/prompt-injection-visual-primer-georg-zoeller-tbhuc/ [00:04:35] Collection of extracted System Prompts from popular chatbots like ChatGPT, Claude & Gemini https://github.com/asgeirtj/system_prompts_leaks [00:05:59] AWS pricing for Kiro dev tool 'a wallet-wrecking tragedy' https://www.theregister.com/2025/08/18/aws_updated_kiro_pricing/ [00:10:07] How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories https://research.kudelskisecurity.com/2025/08/19/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories/ [00:16:36] CodeRabbit Response to RCE (August 18) https://www.coderabbit.ai/blog/our-response-to-the-january-2025-kudelski-security-vulnerability-disclosure-action-and-continuous-improvement [00:16:49] Health of External Secrets Project (Updated) https://github.com/external-secrets/external-secrets/issues/5084 [00:18:07] ….About That 16 Billion Password Story (AKA "Data Troll") https://www.troyhunt.com/that-16-billion-password-story-aka-data-troll/ [00:19:05] GitHub Actions policy now supports blocking and SHA pinning actions - GitHub Changelog https://github.blog/changelog/2025-08-15-github-actions-policy-now-supports-blocking-and-sha-pinning-actions/ [00:22:57] Manage GitHub Repositories as Code https://github.com/cloudposse-terraform-components/aws-github-repository/ [00:35:54] AWS Billing and Cost Management now provides customizable Dashboards https://aws.amazon.com/about-aws/whats-new/2025/08/aws-billing-cost-management-customizable-dashboards/ [00:36:17] Other News & Announcements [00:38:38] IaCConf Spotlight: IaC Security & Governance https://events.iacconf.com/iac-security-spotlight-august-2025/ [00:41:45] Q&A [00:41:51 Terraform-yaml-config/.github/mergify.yml https://github.com/cloudposse/terraform-yaml-config/blob/main/.github/mergify.yml ] [00:44:30] GitHub Action: matrix-extended https://docs.cloudposse.com/github-actions/library/actions/matrix-extended/ [00:52:41] Outro