What Is DevSecOps (and why is this a DevOps problem)?

Поділитися
Вставка
  • Опубліковано 3 гру 2024

КОМЕНТАРІ • 32

  • @abdirahmann
    @abdirahmann 2 роки тому +3

    hi will, what logging system do you use for nodejs apps?
    also, i would love to see a video from you on how you implement least privilege security measure when deploying postgres to prod.
    am about to deploy an app with postgres to prod. please throw some advice for me if you have some.
    also, since you are VERY well educated with all things AWS, is it ideal to go with self maintained linode instance for a postgres deployment or you would advice amazon RDS (postgres), the app is expected to have roughly 200 visitors (humans)👦👧 at max. 😅
    THANKS ALOT. ☺

    • @DevOpsForDevelopers
      @DevOpsForDevelopers  2 роки тому +2

      Hey!
      Alrighty then, let's unpack this:
      LEGAL DISCLAIMER: this is not financial advice. It may not even be good advice. Just my thoughts 🤣
      Logging for nodejs: deploy on ECS Fargate & ship the logs to Cloudwatch Logs. Quick & easy. Worry about advanced logging features when you *need* advanced logging features.
      Least privilege postgres video: added to the list
      Linode or RDS: Go with RDS. They are going to handle backups, upgrades, etc for you. If you go with Linode, you'll need to expose your database publicly or setup a VPC peering connection. I hate leaving databases publicly exposed (but hackers love it when you do)
      200 max users: that's a great spot to be, don't overthink it. You can run something on your phone that meets that demand. Don't over-architect it and focus on getting that number to 200,000, then architect based on what you've learned.

    • @abdirahmann
      @abdirahmann 2 роки тому +1

      @@DevOpsForDevelopers Thanks alot, i'd be learning alot and since i've been avoiding Aws, its time to face it and conquer it! 😂😂 and btw is it me or AWS has a terrible UI team that designed the IAM page, its soo disgusting but its functional, it even makes learning IAM feel like sth old and cluncky that you just want to avoid, its drives me crazy!
      GCP has the best UI amongst all cloud providers and it makes me want to learn GCP more than AWS. Thanks alot for sharing your thoughts.

    • @DevOpsForDevelopers
      @DevOpsForDevelopers  2 роки тому +1

      Definitely not you, the AWS interface needs much love.
      I want to complain, but I don't because every time I'm using the AWS console I'm doing something that I *really* should be doing as Infrastructure as Code, so it's kind of my fault for being there. 🤣
      I've got a video coming out soon that will show you how to manage your IAM users with Terraform and never touch the AWS console. Bonus: it also sets you up to do the same with GCP so you can manage both from 1 file.

    • @abdirahmann
      @abdirahmann 2 роки тому +3

      @@DevOpsForDevelopers 😂😂😂 they took "dont fix if it aint broken" too seriously! 💀💀

  • @АрсланГаджиев-ж5ж
    @АрсланГаджиев-ж5ж 2 роки тому +2

    Hello, you have a great channel. As a devops professional, can you recommend a good practical course from scratch to devops engineer or resources?, step by step and practice to go all the way to work my dream devops engineer

    • @DevOpsForDevelopers
      @DevOpsForDevelopers  2 роки тому

      Unfortunately, that is a really hard question to answer because IMO, the right answer is based on your current skill level, experience, and goals. BUT: that's why I built the DevOps Roadmap. I built it so that you can either identify something you already know, or identify something you're interested in, study it, then see how it relates to other areas of DevOps and pick a logical path to pursue next. You can check it out at devopsfordevelopers.io/roadmap

  • @itguru2037
    @itguru2037 8 місяців тому

    How can devsecops be used in a COTS use case

  • @vichhaiyserey
    @vichhaiyserey 2 роки тому +1

    are you using Snyk free or paid one?

  • @74Bagas
    @74Bagas 2 роки тому +1

    I got 'aha' moment here. Keep it up will 🙏🔨

  • @tlxjunky
    @tlxjunky 2 роки тому +1

    Thanks for the info! Are you able to do a video how you deal with dev ops burnout?

    • @DevOpsForDevelopers
      @DevOpsForDevelopers  2 роки тому

      Yeah. You feeling burned out?

    • @tlxjunky
      @tlxjunky 2 роки тому

      Oh yea! For sure, with travel and OT. The burn out can be real!

  • @IasonOrlandosOx
    @IasonOrlandosOx Рік тому +1

  • @AqibMughal-xg4jx
    @AqibMughal-xg4jx 4 місяці тому

    bro forgot that the intern considered it as good that he pushed the code to production which caused global tech outage crowdstrike today

  • @AqibMughal-xg4jx
    @AqibMughal-xg4jx 4 місяці тому

    your roadmap is not working , not sending mail

  • @Samarth-xx2lg
    @Samarth-xx2lg 2 роки тому +1

    Do DevOps Earn More than Software engineers? I men like the one who code all the day?

    • @DevOpsForDevelopers
      @DevOpsForDevelopers  2 роки тому

      It's about the same for the two as an average. When it comes to salary, the biggest contributing factor is your ability to negotiate.

    • @Samarth-xx2lg
      @Samarth-xx2lg 2 роки тому +2

      @@DevOpsForDevelopers is devops sustainable job? Please give a straight forward answer. & Thanks for keeping the comment section active by actively replying. This helps really.

    • @DevOpsForDevelopers
      @DevOpsForDevelopers  2 роки тому +2

      I'll be 100% unfiltered here. (always try to be)
      Yeah, it's 100% sustainable. **But** we gotta agree on the definition of "sustainable."
      You can have a long, rewarding career in DevOps. I've actually bet my career on it. That said, you'll be doing different things for your entire career. In 10 years, you probably won't be using Kubernetes, Docker, or many other tools we use today. Things change and evolve, and so must your skills for this to be a sustainable career.
      If your definition of sustainable means "go to school, learn the trade, get a job, and 40 hours/week and paid vacation for the rest of your career", this is not the field for you. If those are your goals, I recommend avoiding all tech-related careers. Technology, by definition, is constantly changing. To remain relevant and employable, you will spend the rest of your career balancing working to produce income today + learning to produce income for tomorrow.
      TL;DR: yeah. The jobs will be there. They will look different years from now than today, but they will be there. More important than that, though, is it's on you to keep your skills up to date to take advantage of them.

    • @Samarth-xx2lg
      @Samarth-xx2lg 2 роки тому +2

      @@DevOpsForDevelopers Got it; thanks so much; I never dreamt of doing repetitive task like a robot for rest of my life. I want to do creative things. Thank You Sir, You have lots of dedication on helping others. Please keep it up & we will grow this community.

  • @jagat123
    @jagat123 2 роки тому

    I am first.