There are two security features any piece of software implement: authentication and authorization. Authentication systems evolved a lot over past years. OpenID, SSO, MFA, Magic links. But authorization is the forgotten child of security. Today we use the same authorization system created in the 70s. AWS IAM. Kubernetes RBAC. Postgres/

Hey everyone! If you are a developer that gets stopped by PMs all the time to do simple Firestore updates, this guide will save you a lot of time. Or, if you are a PM that wants to get less things through the dev team and faster delivery for your

This is Part 2 of the series, check out Part 1 before continuing. All right, let’s do it! For context, in Part 1 we set up a Runops connection to Firebase which helped us to update Firestore adding a new Whitelabel into our Feature Flag system. And the structure

The ability to run commands inside a running ECS task was one of the most requested features of the ECS service. Yet, AWS released a pretty bad implementation if we compare it to alternatives like Kubernetes. Some of the key problems: 1. AWS ECS execute-command requires installing a ssm manager

The AWS update-secret operation for Secrets Manager replaces all keys of a secret with the new value provided in the --secret-string. But sometimes we want to add a few extra keys, without replacing values already present in a secret. In this post we show how to use bash to add

Time to call a DevOps engineer to get permission or have them run the patch. The worst thing that can happen to an engineer is to get paged out-of-hours only to realize they can't fix the problem on their own. They did all the hard work of waking up, debugging