Lucas Barbosa @onlybytes

I'm a big fan of using the Elastic Container Service (ECS) on AWS for container-based deployments. In most cases you'll need to set up ALBs to handle ingress. AWS just announced ECS Gateway, which is an account-level resource that doesn't provision anything until services connect. ECS sets up the certificate, hostname, target group and a security group that only accepts ALB traffic. You still pay for the resources used, but the gateway itself doesn't have any extra cost. Looking forward to trying this out. Check out this intro from Channy Yun (윤석찬)! lckhd.eu/YY657y #ECS #AWS #Containers #PlatformEngineering #LoadBalancing

We launched OSS Scanner, which gives critical open source projects free, periodic vulnerability scans from our strongest models. Each finding includes a proof-of-concept, and a patch where possible. red.anthropic.com/oss-scanner

Now in public beta, Claude Platform can send OpenTelemetry traces from the Messages API, Claude Managed Agents, and the Claude SDKs to your observability stack.

10 Years of the SRE book: Announcing the second edition of "Site Reliability Engineering” cloud.google.com/blog/products/… < I'm excited about this and glad to see this foundational book updated with evolved SRE practices and AI factors.

This is a really nice improvement: you can now include EC2 resource tags in VPC flow logs. I wrote a poor version of this about 8 years and 3 jobs ago. It's infinitely more useful than raw IP addresses for making sense of east-west traffic. aws.amazon.com/blogs/networki…

We're publishing our most detailed threat intelligence report to date. It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them. We disrupted every operation in the report, and used the lessons from them to strengthen our safeguards. Where appropriate, we also shared what we found with authorities and other AI companies. These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve. We’re publishing this report so others can spot the same activity on their own platforms, and so we can give the public a clearer view of how emerging threats develop. Read the report: anthropic.com/threat-intelli…

I just published a manifesto for all the developers out there who use an AI coding tool, but feel like they're not shipping much faster I wrote 10 principles for changing how you build software with AI, based on what I've seen work for teams across Amazon kiro.dev/topics/frontie…

On August 17, GitHub experienced a significant outage that disrupted developers and organizations around the world. If you were trying to ship software that day, we let you down. I posted in March and April about the steps we’re taking to make GitHub more reliable. The work is still underway. Here is an update: github.blog/news-insights/…

You can now set Claude Code's output style to Concise. Claude leads with the result, keeps responses short, and still gives full detail when you ask. Turn it on in /config → Output style, or set "outputStyle": "Concise" in settings.json.

S3 Annotations: now your objects can have objects. aws.amazon.com/blogs/aws/amaz…

Setting Docker Hardened Images free | Tushar Jain, EVP of Engineering at... youtu.be/zEBXcJCQqI4?si… via @YouTube

2026

⚠️ On May 16, 2026, we confirmed a targeted attack by a cybercrime group that gained unauthorized access to our GitHub repositories and downloaded our codebase. Here is the latest update about our investigations. grafana.com/blog/grafana-l…

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

🛑 ALERT - Trivy, a popular open-source vulnerability scanner, was compromised after attackers hijacked 75 version tags in #GitHub Actions to deliver an infostealer. It ran in CI pipelines, stealing creds and tokens, then exfiltrating data or staging it via stolen GitHub PATs. 🔗 Attack flow, impacted versions, fixes → thehackernews.com/2026/03/trivy-…

Amazon CloudFront no longer charges for requests blocked by AWS WAF Effective October 25, 2024, all CloudFront requests blocked by AWS WAF are free of charge. With this chang... aws.amazon.com/about-aws/what…

How #AWS tracks the cloud’s biggest security threats and helps shut them down before they happen. aws.amazon.com/blogs/security…

Amazon CloudWatch Internet Weather Map – View and analyze internet health 👉 With the ability to zoom in and understand performance and availability issues that affect a particular city buff.ly/3UjY9s5 #AWS #Networking #Observability

keyboard_arrow_left Previous keyboard_arrow_right Next

GitHub's latest AI tool can automatically fix code vulnerabilities | TechCrunch techcrunch.com/2024/03/20/git…

FYI, in AWS Cost Explorer, you can now get detail on costs for individual Lambda functions (rather than just all of Lambda) for 14 days. #serverless aws.amazon.com/about-aws/what…