CommPulse

I need some advice. I've completed RH124 and RH134. What other Red Hat courses would you recommend that are the most useful for real-world work? I'm taking over the maintenance and administration of our Red Hat servers at work, and I want to keep learning as much as I can so I can do the job well. I'd really appreciate any recommendations based on your experience. submitted by /u/citizoftheworld [link] [comments]

Original Post I’m extremely relieved to share that Google has resolved my billing case and adjusted the unauthorized Gemini API charges. I genuinely want to thank everyone at Google who reviewed the evidence, escalated the case, placed the account on hold while it was being investigated, and helped reach a fair resolution. I also appreciate everyone in this community who offered advice, shared similar experiences, and encouraged me to keep escalating instead of giving up. I also want to personally thank the Firebase team member who saw my Reddit post, reached out to me directly, and helped escalate the issue internally. That outreach made a huge difference and made me feel like someone at Google was genuinely listening. Thank you to the Google Cloud support, billing, and Firebase teams. This resolution removed an enormous financial and emotional burden, and I’m incredibly grateful to everyone who helped. 🙏 submitted by /u/No-Setting8925 [link] [comments]

​ I'm currently working as an Azure Administrator Trainee at a service-based company. I'll be graduating from the trainee program in about 2 months. From what I've seen, the salary after graduation is typically around ₹30k–40k/month (₹3.6–4.8 LPA), with ₹45k/month being a rare case. That's one of the reasons I'm planning my next move early. My day-to-day work includes: - Managing Azure VMs, backups, snapshots, and storage. - Administering Azure App Registrations, Enterprise Applications, SSO, API permissions, and Service Principals. - Managing application secrets, certificates, and authentication across Azure environments. - Azure cost optimization through resource right-sizing and decommissioning unused resources. - Creating Azure capacity, availability, and performance reports for stakeholders. - Worked on an Azure Application Gateway V1 → V2 migration, validating dependencies and ensuring a smooth cutover with minimal downtime. Currently, I want to focus on Azure DevOps, Terraform, Docker, Kubernetes, GitHub Actions, CI/CD, and automation using PowerShell/Python. My long-term goal is to transition into Cloud/DevOps Engineering, and I'd like my next switch to be around ₹12–15 LPA. I'd love some honest feedback: - Is ₹12–15 LPA a realistic target within the next 1–2 years? - Should I stay in Azure Administration or move towards DevOps as soon as possible? - What type of companies should I target product-based, startups, cloud consulting firms, or larger MNCs? - Which roles should I be applying for: Azure Cloud Engineer, DevOps Engineer, Platform Engineer, or something else? - What skills would make the biggest difference in getting there? I'd really appreciate advice from people who've made a similar transition or are currently hiring for cloud/DevOps roles. Thanks! submitted by /u/Rajjzz_FixxooXD [link] [comments]

submitted by /u/Substantial-Self2780 [link] [comments]

Built this after wanting something lightweight that mirrors what Defender for Cloud checks, without needing to pay for it. It audits your Azure subscription from the CLI and surfaces misconfigurations across: - RBAC (Owner/Contributor assigned too broadly) - Network (RDP/SSH exposed, open NSG rules) - Storage (public blob access, HTTP allowed, weak TLS) - Identity (users without MFA, guest accounts) - Compute (VMs with public IPs, missing endpoint protection) - Encryption (Key Vault exposure, missing soft delete) - Monitoring (Defender for Cloud not enabled, no activity logs) Works with az login or a service principal. Outputs a Rich terminal table + JSON report. GitHub: https://github.com/neelkotnis/azure-security-auditor Happy to answer questions or take feedback. submitted by /u/Ok-Code4306 [link] [comments]

for startup, what is your recommendation to use for CI/CD, and process automation AWS SAM or AWS CDK. ** this is my first time with AWS** submitted by /u/robbochinni [link] [comments]

What is everyone pushing to their users to use for screenshots? I am looking for something free but sometimes I can control with ADMX or Reg submitted by /u/EfficiencyUpbeat8354 [link] [comments]

So we ran a proper SaaS audit this month. Our SSPM reported 340 managed apps, which looks reasonable on a dashboard. Then we pulled the raw OAuth grant data from Google Workspace and found another 180 apps that no one in IT knew that it existed. 40 of them had full Drive access. One was a project management platform that the marketing team signed up for in early 2024, and three people are still using it. We don’t have a problem with the tool, but the IT team found out about it during the audit. The SSPM flagged none, but I am thinking its because the apps were never provisioned through IT in the first place. Someone just clicked sign in with Google and that was it. They were living entirely outside the managed ecosystem. What are you all doing about the SaaS your SSPM will never see? submitted by /u/ParticularHat714 [link] [comments]

Just got the obligatory “are you enjoying Outlook” popup. I really hate these things. It’s an app. It’s a thing I use for work. I don’t want to yap with some bot about whether or not I do or don’t like new outlook old outlook, ancient outlook or lotus notes. These things are tools. Utilities. Might as well be a refrigerator. Damn, just make the thing work effectively and stop wrapping it in sparkles and leave me alone. Oh, and get off my lawn too, lol. submitted by /u/Psychological-Tie324 [link] [comments]

If you want to learn how to create AI agents using Microsoft's tools, I found this Microsoft Learn path to be a place to start. It includes subjects, like: - AI agent basics - Writing prompts - Using tools - Agent processes - Microsoft AI Foundry basics This learning path is free and you can go at your speed with Microsoft Learn : https://learn.microsoft.com/en-us/training/paths/develop-ai-agents-azure/?wt.mc_id=studentamb_551132 If you have already finished it I would like to know what you think about it or if you have other Microsoft Learn suggestions. submitted by /u/One-Asparagus-5229 [link] [comments]

We have an Azure File Share mounted on a Linux server using the SMB protocol. We have enabled Azure Files Diagnostic Settings and enabled on Delete Operation and are sending the logs to a Log Analytics Workspace. Our requirement is to identify which files are permanently deleted from the mounted file share and automate a report of those deleted files. During our testing, we observed the following: When a file is deleted from the Azure Portal (HTTPS/REST API): OperationName = DeleteFile This clearly indicates a delete operation. When a file is deleted from the mounted server over SMB: OperationName = Close Category = StorageDelete SmbCommandMinor = FileCloseAndDelete In my test environment, deleting a file ( rm file.txt ) generated the above SMB log, and the file was actually removed from the file share. However, in our production environment, we also see multiple entries with: Category = StorageDelete OperationName = Close but some of those files are still present in the Azure File Share. This suggests the application may be deleting and recreating or replacing files as part of its normal processing. Our queries are related to: Is Category = StorageDelete with SmbCommandMinor = FileCloseAndDelete expected to represent every SMB delete request, even if the file is later recreated? Is there any Azure diagnostic log or audit log that can definitively identify files that were permanently deleted over SMB? Is there any Microsoft-recommended approach to generate a daily/weekly report of deleted files from Azure File Shares? What would be the most cost-effective way to automate such a report? For example: Log Analytics scheduled query Azure Workbook Logic App Azure Automation Runbook Azure Function submitted by /u/LandSignificant4140 [link] [comments]

Resolve AI now charges for results instead of tokens. They say if their agent wastes tokens, that's their cost to eat, not yours. Datadog has made Agent Observability free for up to 40,000 LLM spans a month. They didn't announce it explicitly, they just changed the line at the bottom of their AI blog posts. Opsgenie will be shutting down in April 2027. PagerDuty wrote a post to win those customers, and put incident.io in a comparison table. incident.io hit back point by point. As said by incident.io "calling our AI "limited" is "like describing PagerDuty as a pager." NeuBird put up a page comparing itself to Datadog Bits AI. It's the best public summary of where Bits AI is right now. Bits AI SRE is now called Bits Investigation . It's billed in AI Credits sold in 500-credit bundles , and unused credits expire each month. Their remediation and detection features were shown at DASH 2026 but are still in Preview. Traversal says most AI SRE tools pull data too late. Their point is that the other tools query your observability APIs during the incident and get stuck behind rate limits. They stream the data ahead of time instead. PagerDuty has a new CEO as John DiLullo takes over, Jennifer Tejada moves to Executive Chair. They also shared four straight quarters of GAAP profit and a $100 million buyback. Everyone is now selling prevention, not just faster fixes. NeuBird wrote a buyer's checklist around it. Their test question: "Show me an incident you prevented that never generated an alert." Sherlocks AI shipped an automation builder. Pick a trigger, describe the job in plain English, choose where the result lands. Their pitch: " Describe the job. It runs ." The examples lean preventive rather than reactive, watching canary deploys, flagging infrastructure changes in PRs, tracking pod memory drift. Resolve AI is pushing background agents. Agents that keep running between incidents, watching deploys and doing checks. A customer quote sums it up: "The alerts are already investigated. The deployment summaries are already written." Traversal is renaming things. "Chat with Prod" is becoming "Production Support." "AI-Native Compressor" is becoming "Causal Indexer." Both old and new names are live on their site right now. Sources linked below in comments. submitted by /u/Holiday-Record7341 [link] [comments]

Hey everyone, I need to build a few DSM packages soon, so I’d love to brush up on my skills and get some practice in before taking on a real client project. Does anyone know if or how it’s possible to get access to the installation media and a demo/trial key to set up a small lab environment? Thanks in advance! submitted by /u/Linkboost512 [link] [comments]

I have supported part time a small non-profit company and while I know how important documentation is there just always was something else pressing that was more important. Well I am getting to the point where in the future I am probably going to be moving on and have started to work on trying at least for me document what they have at a high level. I assume and I know what happens when you do that but they have enough technical stuff that if the person actually knows what they are doing then they should be able based on a overview of the systems function dig into it and figure things out. I am not doing anything esoteric but I also have been doing this kind of stuff for *cough* many years. While small they have a lot of technology, just migrated the virtual environment to proxmox, they have AD environment with ADFS connected to m365, etc... I just captured the inventory for everything they have and was about to start writing up a word document that gives a high level for each server etc, layout of the network, vlans etc. I then started to think that maybe I should do something like a wiki or use something else. Although at a high level kind of leaning towards not having it online since it would pretty much give you a working layout of their environment and if compromised would be pretty nice to have. Just thought I would ask what are folks using for documentation, thanks. submitted by /u/bishoptf [link] [comments]

Recently a coworker granted Claude elevated access via SSH to a virtualization host (not a VM, an actual host). To perform a routine task he very well could have done himself. He doesn’t see an issue with this. I on the other hand (with 23yrs experience) see this as a huge security breach, and don’t trust AI todo my job, (or even that it’s doing what it says it’s doing) for me. I’m my opinion it’s a tool, not a human replacement. What’s your reaction, how would you react to this situation, or thoughts on the topic? Sure, ask AI how to perform a task, validate that it’s performing the task you asked, and nothing else- copy/paste the commands. Great. But removing the human verification & validation element- hell no. submitted by /u/xstrex [link] [comments]

submitted by /u/AlexThibaud [link] [comments]

Hi, I am an international student in Australia in bachelors of IT. In my next semester, I have to choose my majors. Now I am thinking of selecting "cloud engineering and IOT" (it is considered one major at my uni). I am interested in doing it, but the issue comes with choosing the right option. I have secured AZ-900 certification, but after searching and looking at Reddit posts, I have heard that certifications are a waste of money. I was going to do AZ-104 but dropped out. Now, I am very confused about whether this major and field would be a better option for me. I have a lot of interest in doing but looking at the current market and the AI revolution situation, I am very confused. I have the option for cybersecurity, but that field requires security clearances even for internships. Even if I go with cloud computing, I would need a proper roadmap on what to do and how to do it. YouTube is filled with these types of videos, but everyone has a different roadmap that also confuses me. I need some suggestions from people working in this industry. I am happy to share more details about my situation. Thank you for reading. submitted by /u/Hassan_121 [link] [comments]

Nobody writes about this, so here are our dates and numbers while they're fresh. Letter of Validation on 31 July 2026, Google accepted it the next day. Two weeks, roughly, start to finish. One thing that confused us early: Tier 2 is called AL1 now (Tier 3 is AL2). Google's emails still say Tier 2, the lab's portal says AL1, same thing. What you're graded on is the ADA CASA Test Guide v2.1.1, 48 checks, free on GitHub. Scope review comes first, and it's where we nearly lost We're Mailneo , an email marketing tool with a unified inbox built in, so Gmail isn't a side feature for us, it's the product. That means gmail.modify . Which is restricted. Which means CASA. Google wrote back suggesting we swap gmail.modify for gmail.readonly + gmail.send . We said no, using the "unable to use narrower scopes" option: messages.modify , messages.trash and messages.untrash only accept mail.google.com or gmail.modify . So the pair they suggested breaks inbox organisation completely, and readonly is restricted anyway, so you save nothing on CASA by switching. We quoted the methods and the exact scopes each takes, straight out of the API reference. They accepted it, no further argument. Worth knowing, because that suggestion is a form letter. If narrower scopes genuinely can't do the job, say so, but bring receipts. Oh, and an earlier round failed on "app functionality" for a dumb reason: our trial paywall locked the Google reviewer out. Comp their account at the database level, then log in as them once and dismiss whatever modals pop up. What we paid TAC Security, Premium plan, unlimited revalidations. Lists at $855. We paid $794 after asking about a discount, so, ask. Basic is cheaper but only two rescan cycles. The scan OWASP ZAP through TAC's ESOF platform. Ran 28 July, about three hours, results the same day. 14 findings: 0 critical, 0 high, 1 medium, 4 low, 9 informational. All of it has to be fixed or formally disputed. Yes, including the informational ones. The SAQ 55 yes/no questions, each needing a written justification. ASVS derived: trust boundaries, where you enforce access control, password storage, sessions, TLS, input validation, dependencies, logging. If you're full stack, basically all of it applies. Answer like you're citing evidence. "Yes, we use bcrypt" gets you a follow-up email. "Yes, bcrypt at cost factor N, in this file, per NIST 800-63B 5.1.1.2" doesn't. And own your gaps. The SAQ caught a real one for us: minimum password length was 8, which fails. We bumped it to 12 and said exactly that in the answer. Cost us nothing. Overselling yourself is what drags you into a ten-email thread. They came back twice wanting evidence, once on how we encrypt stored Google user data, once on three specific SAQ items. Command output beats prose. For "can you restore your database" we sent raw RDS output showing backup retention and PITR. For "screenshot your encrypted data" we didn't want to export customer rows, so we ran our real encryption code against a fake payload of the same shape: plaintext in, ciphertext out, tampered record rejected. Fine by them. Things I'd tell past us Start the day the deadline email lands. We passed scope review back in January, never booked the assessment, and the whole verification lapsed. Redoing scope review hurt far more than the assessment did. Grade yourself against the Test Guide before you pay anyone. It's free and it's literally the rubric. Every finding you kill early is a rescan you don't burn. Run npm audit first. Vulnerable dependencies are the usual blocker and they eat the most calendar time. Everything else is fast by comparison. On a managed host, some findings are just your platform (CDN CORS headers, Server header, caching). Those want a written justification, not a code change. You do this again every 12 months. Ours is up around July 2027, reminder already set for May. Ask me anything. submitted by /u/Neither-Bass2083 [link] [comments]

2 Days ago RealVNC ended public access for Viewer 7. Now Connect Viewer 8 is the only publicly accessible version and requires a RealVNC account. "The RealVNC Classic Viewer (v7) will continue to be available for customers with a Premium or Enterprise plan to download from the RealVNC Portal." Source: https://help.realvnc.com/hc/en-us/articles/35745908986653-Important-changes-to-RealVNC-Viewer-Information-and-FAQs Time to make the move to open source VNC implementations. submitted by /u/ZenAdm1n [link] [comments]

Disclosure: I built this open-source tool. I kept running into a subtle GCP problem: the active project in `gcloud config` can differ from the project and quota project used by Application Default Credentials. That means `gcloud` may appear to be configured for development while Python, Node.js, Terraform or another SDK is still operating with a different ADC context. I built **gcpctx** to manage these pieces as one named context: - active Google Cloud project - active account - gcloud configuration - Application Default Credentials - ADC quota project - optional repository-local context Example: ```bash npm install -g gcpctx gcpctx init dev gcpctx use dev gcpctx doctor The goal is not to replace IAM or make deployments magically safe. It is to make the effective local GCP context explicit and easier to verify. Source: https://github.com/UriBer/gcpctx npm: https://www.npmjs.com/package/gcpctx I would especially appreciate feedback on: How you currently switch between GCP environments. Whether you have encountered gcloud/ADC context mismatches. Which workflows should be supported next: Terraform, PowerShell, CI or AI coding agents? submitted by /u/chilkibilki [link] [comments]