AWS Community Hub
GitOps Implementation at Enterprise Scale — Moving Beyond Traditional CI/CD
Sumanth Kadulla | | ArgoCD, change traceability, CI/CD migration, CI/CD reliability, cloud native delivery, configuration drift, declarative infrastructure, deployment automation, deployment rollback strategy, DevOps at scale, devsecops, dora metrics, gitops, GitOps adoption, GitOps security, infrastructure as code, Kubernetes continuous delivery, platform engineering, policy as code, pull-based deploymentsTraditional CI/CD pipelines hit scaling limits. Learn how GitOps improves deployment reliability, security, and DORA metrics—and what it takes to migrate successfully ...
Checkmarx Extends Vulnerability Detection to AI Coding Tool from AWS
Checkmarx this week revealed it has added support for the Kiro artificial intelligence (AI) coding tool provided by Amazon Web Services (AWS) to its Checkmarx Developer Assist that leverages AI to surface ...
Bridging the Dev–Security Gap With Smarter Authorization
Software teams have always lived with a built-in tension – developers push to ship fast, while security teams pump the brakes to assess risk. Now, with AI flooding the enterprise, that friction ...
Arcjet SDKs Make It Simpler for Developers to Include Security Functions
Arcjet this week made available a software development kit (SDK) that makes it simpler for JavaScript developers to embed capabilities such as bot detection, rate limiting, email validation, attack protection and data ...
CodeHunter API Integrates Deterministic AI Models into DevSecOps Workflows
CodeHunter, a provider of behavioral malware analysis and threat intelligence tools, today announced it is making available an application programming interface (API) to make it simpler to embed the capabilities it provides ...
Rein Security Emerges to Analyze Reachability of Application Vulnerabilities
Mike Vizard | | AI-generated vulnerabilities, API security, application security, continuous vigilance, devsecops, funding, Matan Bar Efrat, performance overhead, security automation, software development, software security testing, vulnerability managementRein Security has emerged from stealth to launch an application security platform capable of determining the reach of a vulnerability based on which libraries and application programming interfaces are actually running in ...
The 10-Layer Monitoring Framework That Saved Our Clients From 3 a.m. Pages
Amjad Syed | | alerting philosophy, apm, application performance, cache metrics, database monitoring, Distributed Tracing, external dependency monitoring, Incident Prevention, infrastructure monitoring, Kubernetes monitoring, log pattern detection, , monitoring framework, observability, OpenTelemetry, production monitoring, real user monitoring, SSL certificate monitoring, synthetic monitoringA practical 10-layer monitoring framework for Kubernetes and VM environments that prioritizes what to watch—system, application, HTTP/RUM, databases, caches, queues, tracing, SSL, external deps, and log patterns—to prevent outages and reduce noisy ...
Why Responsible AI Isn’t Optional in DevOps — it is the Next Frontier of Ownership
Sundeep Bobba | | accountability, AI in DevOps, automation, CI/CD pipelines, decision-making, governance, leadership, organizational commitment, responsible AI, trust in technologyThe integration of AI in DevOps brings both opportunities and accountability challenges. This article explores the implications of AI decision-making within CI/CD pipelines and emphasizes the need for governance frameworks to ensure ...
Survey Surfaces Disconnect Between DevOps Metrics and Business KPIs
A survey of 418 DevOps professionals finds that while DevOps teams closely monitor and observe the performance of applications, not nearly as many are able to correlate the value of those efforts ...
Legit Security AI Tool Uses Threat Feed to Identify Risks to Software Supply Chain
Legit Security this week added a threat feed that DevSecOps teams can use to instantly determine if a newly discovered vulnerability impacts their software supply chain. Built using the Legit VibeGuard tool, ...
Designing Privacy-Safe Logging at Scale: Lessons from Building Compliance-Aware Observability Systems
As regulatory scrutiny increases and distributed systems grow more complex, many organizations have accepted that privacy-safe logging is important. Fewer have figured out how to actually build it without sacrificing observability, developer ...
Observability, SRE and Uptime in Telehealth Platforms: A DevOps Playbook
Michael Chukwube | | cloud infrastructure, devops, incident management, observability, Patient Data Security, resilience engineering, site reliability engineering, TelehealthVirtual care went from nice to have to must have during the COVID-19 pandemic and while in-person visits are starting to pick up again, telemedicine is here to stay. Its growth will ...
