June 2021 Summaries

The 2021 Azure outage highlighted the significant risks associated with reliance on major cloud service providers like Microsoft, Amazon, and Google, collectively known as the Big 3, which offer indispensable services for modern enterprises. The Azure outage, triggered by a DNS code defect, temporarily disrupted services relied upon by over 280,000 companies, including critical functions like data security and system monitoring, exposing vulnerabilities inherent in vendor lock-in and single-supplier dependency. This incident, along with similar outages from AWS and GCP, underscores the necessity for businesses to develop contingency plans and consider hybrid cloud solutions or third-party platforms like Coralogix, which integrate services from multiple vendors to enhance resilience, system visibility, and security, thereby mitigating the impact of such outages on business continuity.

President Joe Biden's executive order on improving cybersecurity mandates federal departments and agencies to adhere to rigorous cybersecurity standards, aiming to address the widespread lax practices that have led to high-profile cyberattacks like the Colonial Pipeline and SolarWinds incidents. The order, which aligns with principles from cybersecurity advocacy groups such as NIST, is primarily targeted at public organizations but is seen as a precursor to potential regulations in the private sector. It requires IT and OT providers to store data according to new regulations, report incidents, and cooperate with government efforts against cyber threats. The order also highlights the importance of secure software development and the adoption of two-factor authentication and encryption. Businesses are encouraged to treat the order as legally binding, with particular emphasis on logging, data storage, and system visibility to prevent vulnerabilities that could lead to severe legal consequences. The executive order is a proactive step in recognizing cybersecurity as a national concern, urging both public and private sectors to prioritize security measures that should have been standard practice long before this directive.

The text provides a detailed overview of how to set up and utilize AWS CloudWatch Events and EventBridge for managing event streams in microservices systems. It explains the importance of configuring event triggers to notify DevOps teams about errors in APIs and describes how AWS developed CloudWatch Events and EventBridge to address this need. These services allow users to deliver data to a target upon specific system events, such as operational changes or logging events. The text outlines the process of creating event buses, applying rules to these buses, and selecting event targets like Lambda functions, which are triggered when certain patterns are detected. It also highlights the ability to process large data sets and gain microservice observability through content-based filtering in EventBridge. The example provided demonstrates setting up a rule to trigger a Lambda function when invalid input is detected at an API Gateway, emphasizing the need for further data processing to distinguish between malicious attacks and simple errors. Additionally, the text suggests using external tools like Coralogix for analyzing API data and detecting critical issues.

Software as a Service (SaaS) has revolutionized various sectors by offering cloud-based, plug-and-play solutions, yet observability tools are lagging behind in adopting this model. Platforms like Heroku exemplify the potential of SaaS in DevOps by simplifying app deployment and scalability through managed containers, while services like Coralogix offer SaaS-based log analytics. However, the diverse formats of log data and security concerns hinder the transition to SaaS observability tools. Moving log storage to cloud solutions like AWS S3 can facilitate SaaS adoption, allowing organizations to leverage advanced analytics and machine learning for insights. Despite these advancements, many organizations still rely on on-premises systems, which slows the shift toward fully embracing SaaS observability solutions.