Cloud Posse DevOps "Office Hours" (2022-02-23)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have.

You can register here: https://cloudposse.com/office-hours

Join the conversation:
https://slack.cloudposse.com/

Find out how we can help your company:
https://cloudposse.com/quiz
https://cloudposse.com/accelerate/

Learn more about Cloud Posse:
https://cloudposse.com
https://github.com/cloudposse
https://sweetops.com/
https://newsletter.cloudposse.com
https://podcast.cloudposse.com/

[00:00:00​] Intro
[00:01:24​] Announcing the general availability of AWS Backup for Amazon S3
https://aws.amazon.com/about-aws/whats-new/2022/02/general-availability-aws-backup-amazon-s3/
[00:03:21​] AWS Firewall Manager now supports versioning for AWS WAF managed rule group
https://aws.amazon.com/about-aws/whats-new/2022/02/aws-firewall-manager-waf-rule-group/
[00:04:02​] AWS Launches Discourse Forum/Community for QuickSight
https://community.amazonquicksight.com/t/troubleshoot-analysis-titles-and-subtitles-failed-to-load-narrative-editor/1776
[00:05:20​] Introducing auto-adjusting budgets
https://aws.amazon.com/about-aws/whats-new/2022/02/auto-adjusting-budgets/
[00:06:31​] cloudposse/terraform-aws-s3-bucket adds AWS Provider v4 support
https://github.com/cloudposse/terraform-aws-s3-bucket/releases/tag/0.48.0
[00:07:30​] GitHub Opens Advisory Database to contributions
https://github.blog/2022-02-22-github-advisory-database-now-open-to-community-contributions/
[00:09:20​] Other
[00:10:19] Amazon EKS Release calendar
https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-release-calendar
[00:11:54] Waxing philosophical: DevOps sometimes feels like building sandcastles
[00:17:49​] Why is it a best-practice from a compliance/ops standpoint to put all s3 buckets into their own AWS project?
[00:24:57​] Is anyone using AWS SSM Session manager to enable devs to connect to a staging RDS instance, and NOT using ssh keys/connections managed through SSM?
[00:34:23​] How do you build the observability model at the app level?
[00:43:47​] I’m looking for examples to build a VPC without internet connection without losing connection to ECR, S3 and DynamoDB. Do you have any suggestions?
[00:52:16] Terraform wirenodes https://github.com/jbraswell/terraform-wireguard
[00:55:52​] Outro