AWS LetsEncrypt Lambda or Why I Wrote a Custom TLS Provider for AWS Using OpenTofu and Go Oct 2nd 2024, 15:15, by Alexander Sharov These days, it's challenging to imagine systems that have public API endpoints without TLS certificate protection. There are several ways to issue certificates: - Paid wildcard certificates that can be bought from any big TLS provider
- Paid root certificates that sign all downstream certificates that are issued by corporate PKI systems
- Free certificates issued by TLS providers like LetsEncrypt or AWS Certificate Manager
- Self-signed certificates, issued by OpenSSL or another tool
![Let's Encrypt logo]() Within the context of this post, I will mainly discuss free certificates that can be used inside of AWS, but not only by AWS services. Clearly, using anything other than AWS Certificate Manager makes no sense if you exclusively use managed AWS services and don't have strict security requirements. AWS Certificate Manager offers a very convenient and speedy method of issuing certificates via DNS or HTTP challenges; however, you face basic AWS limitations if you need to use these certificates outside of AWS services (API Gateway, ALB, NLB, etc.), such as an EC2 instance running Nginx that needs a physical certificate file. Additionally, even if you request it, AWS Certificate Manager does not display the certificate content. | Java 23: What Developers Need To Know Oct 2nd 2024, 14:00, by Tom Smith As Java implements its 23rd major release on September 17, 2024, developers are in for a treat with many new features and improvements. Oracle's latest release promises to make development more efficient and enjoyable while enhancing the platform's performance, stability, and security. Let's dive into the key aspects developers should be excited about in Java 23. The Six-Month Release Cadence Continues Oracle is sticking to its six-month release cycle for Java, now in its seventh year. This approach has successfully delivered regular updates and innovations to the Java ecosystem. A Long-Term Support (LTS) version is released every two years, providing stability for enterprises that prefer less frequent updates. Java 23 marks the 14th release in this six-month cadence. | Misconfiguration Madness: Thwarting Common Vulnerabilities in the Financial Sector Oct 2nd 2024, 13:00, by Matias Madou Ever since people started putting their money into banks and financial institutions, other people have sought to steal those deposits or otherwise fraudulently obtain those protected assets. When someone asked infamous 1920s-era bank robber Willie Sutton why he robbed banks, he simply replied, "Because that's where the money is." Today, much of the money held by banks and other financial institutions is in digital form, and many of the sensitive records held by those firms can be just as valuable as the digital currency itself. But the reasons behind the targeting of financial institutions by threat actors remain much the same as they were in Sutton's time over 100 years ago: that's where the money — and at least some valuable personal data — is kept. | How JavaScript DataTable Libraries Address Challenging Requirements in Web Data Management Oct 2nd 2024, 12:00, by Ivan Petrenko Web data management is becoming increasingly important as applications move towards being more complex and data-intensive. The necessity to manage large and complex datasets causes numerous challenges that demand effective solutions from development teams. Fortunately, web developers can rely on ready-made tools such as a JavaScript data table library (or simply a grid) that make it easier to deal with such issues effectively.
![Photo of spreadsheets, pen, notebook, and glasses]() In this article, we'll consider the most challenging data management requirements encountered in web apps and highlight how popular JavaScript grid components help address these pain points. | Unit Integration Testing With Testcontainers Docker Compose Oct 2nd 2024, 11:00, by Gunter Rotsaert Is your test dependent on multiple other applications and do you want to create an integration test using Testcontainers? Then the Testcontainers Docker Compose Module is the solution. In this blog, you will learn how convenient it is to create an integration test using multiple Testcontainers. Enjoy! Introduction Using Testcontainers is a very convenient way to write a unit integration test. Most of the time, you will use it in order to test the integration with a database, a message bus, etc. But what if your application interacts with an application that consists of multiple containers? How can you add these containers to your unit integration test? The answer is quite simple: you should use the Docker Compose Module. | |
Comments
Post a Comment