DevOps "Office Hours" (2022-01-05)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have. 

You can register here: https://cloudposse.com/office-hours

Join the conversation: 
https://slack.cloudposse.com/

Find out how we can help your company:
https://cloudposse.com/quiz
https://cloudposse.com/accelerate/

Learn more about Cloud Posse:
https://cloudposse.com
https://github.com/cloudposse
https://sweetops.com/
https://newsletter.cloudposse.com
https://podcast.cloudposse.com/

[00:00:00​] Intro
[00:01:17​] Cert-manager now supports Private CA ACM (no public ACM yet) 
https://aws.amazon.com/about-aws/whats-new/2022/01/acm-kubernetes-cert-manager-plugin-production/
https://github.com/aws/containers-roadmap/issues/904
[00:04:32​] Huge PR for Maintenance on Beanstalk Module
https://github.com/cloudposse/terraform-aws-elastic-beanstalk-environment/pull/203
[00:05:25​] SQL Migrations with Terraform (via Oliver)
https://registry.terraform.io/providers/paultyng/sql/latest/docs/resources/migrate
[00:09:21] Checkout our #jobs Channel for new postings
[00:10:02​] Ready to do things the Cloud Posse way? Take our quiz.
https://cloudposse.com/quiz
[00:11:41​] Is updating a securitygroup with lambda really the only way to protect endpoints behind Cloudfront from other traffic?
[00:16:35​] Any insights on provisioning cdns that are optimized to minimize http 2 response delays?
[00:30:30​] CloudTrail lake announced https://aws.amazon.com/blogs/mt/announcing-aws-cloudtrail-lake-a-managed-audit-and-security-lake/ 
[00:31:55​] Anyone working with VPC IPAM? 
[00:36:30​] Do you have any suggestions to prevent creation of resources without cost allocation tags?
[00:39:00​] High CVE in containerd
https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c
https://nvd.nist.gov/vuln/detail/CVE-2021-43816
[00:42:18​] Why would we move from ECS on EC2 to Kubernetes?  
[00:53:19​] Outro 


#officehours,#cloudposse,#sweetops,#devops,#sre,#terraform,#kubernetes,#aws