Michael Gasch

@embano1.mgasch.com

Product Manager AWS. Golang. Distributed Systems. Views and opinions are my own.

From curl | bash off the internet… …to docker run some random image… …to /plugin install in coding agents. Same vibes, bigger blast radius. Supply chain management for plugins, anyone? :)

It’s unbelievable how much of an impact LLMs have on my daily work. I‘m definitely 10x more productive and the quality of my work also improved as these tools help me to reduce my deficiencies. Nope, they don’t replace thinking (yet), but all the undifferentiated things which slow down productivity.

Nice, more management events. In EventBridge (receiving CloudTrail events), we call those non-mutating events which customers and partners use to subscribe, filter and quickly take action. Common use cases (obviously) threat detection (S3 bucket scans anyone?) and identifying noisy polling code.

Nick Frichette@frichetten.com · 12mo ago

Old and busted: Cloud attackers making noisy List/Describe calls. New hotness: Laundering enumeration calls through an AWS service silently. Or at least, that used to work, until @datadoghq.com partnered with AWS to close this gap. Read more here: securitylabs.datadoghq.com/articles/enu...

I think *most* errors should default to returning a "safe" error message that doesn't include any raw input data or sensitive data about the host system, and then add an optional field/method that has more detailed info that might be sensitive (likely only used during debugging).