November 2019 Summaries

Kong utilizes a suite of tools including HashiCorp's Terraform and AWS GuardDuty to enhance security and automate infrastructure management through Infrastructure as Code (IaC). GuardDuty, a continuous monitoring service, detects security threats by analyzing events from CloudTrail, VPC Flow Logs, and DNS logs using machine learning and anomaly detection. It aggregates findings across multiple AWS accounts into a master account for centralized management, allowing threats to be detected and addressed efficiently. To facilitate quick responses, Kong configures GuardDuty to send notifications to CloudWatch Events, which then trigger a Lambda function called GuardDuty2Slack to alert the security team via Slack. The setup process, detailed in the text, involves creating IAM roles and configuring Terraform scripts to manage accounts and regions, ensuring comprehensive threat detection and automated notifications. The post provides a step-by-step guide for implementing these configurations and includes code examples to integrate member accounts and enable Slack notifications for detected threats.

Kong has announced the general availability of Kong Enterprise 2020, a flagship solution designed to optimize application modernization through intelligent automation and governance across the entire lifecycle of APIs and services. The new release addresses the challenges of legacy API management platforms by supporting decentralized architectures, automating workflows, and integrating CI/CD practices. It includes features such as Kong Studio for integrated service design and testing, multi-protocol support for gRPC, GraphQL, and Kafka, and the visual Service Map with Kong Brain for real-time architecture insights. Additionally, Kong Teams enhances collaboration and onboarding, while major updates to Kong Manager and the Dev Portal improve user experience and management workflows. These enhancements aim to provide organizations with comprehensive service management capabilities from pre-production to post-production across various platforms and deployment patterns.