CommPulse

Hi, I am an international student in Australia in bachelors of IT. In my next semester, I have to choose my majors. Now I am thinking of selecting "cloud engineering and IOT" (it is considered one major at my uni). I am interested in doing it, but the issue comes with choosing the right option. I have secured AZ-900 certification, but after searching and looking at Reddit posts, I have heard that certifications are a waste of money. I was going to do AZ-104 but dropped out. Now, I am very confused about whether this major and field would be a better option for me. I have a lot of interest in doing but looking at the current market and the AI revolution situation, I am very confused. I have the option for cybersecurity, but that field requires security clearances even for internships. Even if I go with cloud computing, I would need a proper roadmap on what to do and how to do it. YouTube is filled with these types of videos, but everyone has a different roadmap that also confuses me. I need some suggestions from people working in this industry. I am happy to share more details about my situation. Thank you for reading. submitted by /u/Hassan_121 [link] [comments]

Nobody writes about this, so here are our dates and numbers while they're fresh. Letter of Validation on 31 July 2026, Google accepted it the next day. Two weeks, roughly, start to finish. One thing that confused us early: Tier 2 is called AL1 now (Tier 3 is AL2). Google's emails still say Tier 2, the lab's portal says AL1, same thing. What you're graded on is the ADA CASA Test Guide v2.1.1, 48 checks, free on GitHub. Scope review comes first, and it's where we nearly lost We're Mailneo , an email marketing tool with a unified inbox built in, so Gmail isn't a side feature for us, it's the product. That means gmail.modify . Which is restricted. Which means CASA. Google wrote back suggesting we swap gmail.modify for gmail.readonly + gmail.send . We said no, using the "unable to use narrower scopes" option: messages.modify , messages.trash and messages.untrash only accept mail.google.com or gmail.modify . So the pair they suggested breaks inbox organisation completely, and readonly is restricted anyway, so you save nothing on CASA by switching. We quoted the methods and the exact scopes each takes, straight out of the API reference. They accepted it, no further argument. Worth knowing, because that suggestion is a form letter. If narrower scopes genuinely can't do the job, say so, but bring receipts. Oh, and an earlier round failed on "app functionality" for a dumb reason: our trial paywall locked the Google reviewer out. Comp their account at the database level, then log in as them once and dismiss whatever modals pop up. What we paid TAC Security, Premium plan, unlimited revalidations. Lists at $855. We paid $794 after asking about a discount, so, ask. Basic is cheaper but only two rescan cycles. The scan OWASP ZAP through TAC's ESOF platform. Ran 28 July, about three hours, results the same day. 14 findings: 0 critical, 0 high, 1 medium, 4 low, 9 informational. All of it has to be fixed or formally disputed. Yes, including the informational ones. The SAQ 55 yes/no questions, each needing a written justification. ASVS derived: trust boundaries, where you enforce access control, password storage, sessions, TLS, input validation, dependencies, logging. If you're full stack, basically all of it applies. Answer like you're citing evidence. "Yes, we use bcrypt" gets you a follow-up email. "Yes, bcrypt at cost factor N, in this file, per NIST 800-63B 5.1.1.2" doesn't. And own your gaps. The SAQ caught a real one for us: minimum password length was 8, which fails. We bumped it to 12 and said exactly that in the answer. Cost us nothing. Overselling yourself is what drags you into a ten-email thread. They came back twice wanting evidence, once on how we encrypt stored Google user data, once on three specific SAQ items. Command output beats prose. For "can you restore your database" we sent raw RDS output showing backup retention and PITR. For "screenshot your encrypted data" we didn't want to export customer rows, so we ran our real encryption code against a fake payload of the same shape: plaintext in, ciphertext out, tampered record rejected. Fine by them. Things I'd tell past us Start the day the deadline email lands. We passed scope review back in January, never booked the assessment, and the whole verification lapsed. Redoing scope review hurt far more than the assessment did. Grade yourself against the Test Guide before you pay anyone. It's free and it's literally the rubric. Every finding you kill early is a rescan you don't burn. Run npm audit first. Vulnerable dependencies are the usual blocker and they eat the most calendar time. Everything else is fast by comparison. On a managed host, some findings are just your platform (CDN CORS headers, Server header, caching). Those want a written justification, not a code change. You do this again every 12 months. Ours is up around July 2027, reminder already set for May. Ask me anything. submitted by /u/Neither-Bass2083 [link] [comments]

2 Days ago RealVNC ended public access for Viewer 7. Now Connect Viewer 8 is the only publicly accessible version and requires a RealVNC account. "The RealVNC Classic Viewer (v7) will continue to be available for customers with a Premium or Enterprise plan to download from the RealVNC Portal." Source: https://help.realvnc.com/hc/en-us/articles/35745908986653-Important-changes-to-RealVNC-Viewer-Information-and-FAQs Time to make the move to open source VNC implementations. submitted by /u/ZenAdm1n [link] [comments]

Disclosure: I built this open-source tool. I kept running into a subtle GCP problem: the active project in `gcloud config` can differ from the project and quota project used by Application Default Credentials. That means `gcloud` may appear to be configured for development while Python, Node.js, Terraform or another SDK is still operating with a different ADC context. I built **gcpctx** to manage these pieces as one named context: - active Google Cloud project - active account - gcloud configuration - Application Default Credentials - ADC quota project - optional repository-local context Example: ```bash npm install -g gcpctx gcpctx init dev gcpctx use dev gcpctx doctor The goal is not to replace IAM or make deployments magically safe. It is to make the effective local GCP context explicit and easier to verify. Source: https://github.com/UriBer/gcpctx npm: https://www.npmjs.com/package/gcpctx I would especially appreciate feedback on: How you currently switch between GCP environments. Whether you have encountered gcloud/ADC context mismatches. Which workflows should be supported next: Terraform, PowerShell, CI or AI coding agents? submitted by /u/chilkibilki [link] [comments]

I got a very not expected 500+ euros bill from Azure, which is very hard for me to understand. I used the agents on the marked day probably, but not nearly as they reported, and even technically speaking, this usage is waaay over Azure's model limit. I have a limit of 40k tokens a minute, which is annoying sometimes, but it (should) help prevent cases like this. The graph of input token used show a minute with over 4M tokens. https://preview.redd.it/xc2ei9lcirgh1.png?width=826&format=png&auto=webp&s=20bacbff3d4596890a2c990c25a6fdc67efb67b5 That does not really reflect my use (you can see earlier that evening a small usage of few hundred tokens, that is usually my usage and the rate limit). Did anyone encounter something like that, or maybe someone can help me understand how this was possible? I am assuming they made a mistake honestly submitted by /u/hummus4everyone [link] [comments]

Ich habe bei Kiro ein Abo abgeschlossen temporiere gedacht für einen Monat. Problem einer Geschichte ist ich kann das Abo nicht mehr ab bestellen und Sie buchen weiterhin ab. Ich habe mich dot an den Support gewandt. Und keiner hat geantwortet. Ich hab's wieder getan und wieder und wieder und wieder. Keine Antwort weiterhin Abbuchungen. Jetzt ist die Frage wie komme ich an den AWS Support ran? Weil das Ganze anscheinend über AWS läuft submitted by /u/Ramba22187 [link] [comments]

3 days ago our AWS account was marked suspended without any notice . We're a startup, building our first product and being locked out of the account is painful right now. All the documents and verifications that were asked have been submitted. Still awaiting resolution. Has anyone else gone through this experience? submitted by /u/No_Abbreviations_429 [link] [comments]

submitted by /u/TibFromParis [link] [comments]

Hi everyone! I have a phone interview for the AWS TAM position in a couple weeks, and I want to try my best to be as prepared as possible for it. Does anyone have any advice on how I could best do so, as Ill be honest Ive tried compiling resources to prepare myself but was a bit overwhelmed with some of the conflicting information on what to prepare for. I'm aware it will predominantly be technical with some behavioural questions, but how should I prepare exactly for the interview as a whole and with what resources? submitted by /u/CryingBananas23 [link] [comments]

I did a dumb exercise last week: sat down and wrote out every tool that touches a single deploy on my team, start to finish. Not “tools we have licenses for”, just the ones actually in the critical path of getting one change into production. Landed on 14. Source control. The CI runner. A separate container registry. An image scanner that runs after the registry push. A secrets manager. The Kubernetes dashboard we check for rollout status. A log aggregator. A separate APM/tracing tool, because the logs don't show latency well on their own. An alerting tool that is, confusingly, different from the paging tool. A DNS/cert dashboard. A cost/billing dashboard nobody opens until the invoice is a surprise. The ticketing system for the actual incident. And a chatops bot that glues some of this together, badly. None of these were wrong choices individually. Each one was probably the right call in isolation, at the time it got added. But nobody ever sat down and asked whether this thing talks to the other 13. It's less a stack and more a pile that happens to work most days. What's bugging me isn't the number itself. It's that almost nobody on the team could tell you the number without doing this exercise. We just live inside it. New hires take weeks just to learn where to look when something breaks, and that's before they've learned what any individual tool actually does. So, genuinely curious: if you did this exercise on your own team, what would your number be? And more interesting to me: which of your 10+ tools do you think is actually load-bearing, versus which one is just... there, inherited from a decision three engineers ago that nobody wants to be the one to rip out? Not fishing for “just consolidate everything into one platform” as the answer. I don't think that's automatically true either. Sometimes the sprawl is a symptom of real, unavoidable complexity, not laziness. More curious whether other teams' numbers look like mine, and whether anyone's actually fixed this in a way that stuck. submitted by /u/Complete_Sample_3149 [link] [comments]

Eventually this entire system needs to be torn down and rebuilt, but I need a "temporary" solution that will work for now until that is done. Existing Setup : Server: Windows Server 2019 It is not a DC, because no on-premises AD is being used. Running an ancient accounting program. Shared Folders, which must be Mapped as Network Drives on client machines running Windows. Users defined locally in Windows Server with permission to access Shared Folder. Client Machines: Windows 11 Pro Managed by InTune Login via Entra credentials. Manually mapping a Network Drive for each User to the Server, using their local User defined on the Server. I'd love to be able to Map the Network Drive using each user's Entra credentials, but to do this, the Windows Server would have to be aware of the Entra Users. I know there is no great way to synchronize users from Entra back to an on-premises AD DC, but that's not really what I need. I just need to be able to authenticate Shared Folder access with Entra credentials. Could the Windows Server act as a "pass-through" where it hands off authentication to an LDAP server? I've already set up the AzureAD-LDAP-Wrapper on my local Synology to allow for Entra-based authentication of the Synology's Shared Folders, and it's working well. Is there any way I could point the Windows Server to that same LDAP Wrapper, and then set permissions for the Shared Folders on the Windows Server based on those LDAP users? I'm thinking maybe this is what I need? Configure AD FS to authenticate users stored in LDAP directories in Windows Server 2016 or later Does anyone have any experience trying to do something this stupid? submitted by /u/ZippyDan [link] [comments]

Our department is finally getting a budget to replace the decade old seating in the server room. I personally use an Hbada X7 Prestige at home and the Alcantara material breathes surprisingly well. The purchasing guy wants to buy those cheap fake leather chairs off Amazon to save money. How do I convince him that synthetic leather is a terrible idea for a room that runs warm all day. submitted by /u/Robin4god [link] [comments]

Does anyone have any idea on the above question? Both technologies have been available for a long time now - is there some technical reason we can’t have paas windows containers? Is there is, I’d be interested to know what implications that has on aks submitted by /u/catmanjan2 [link] [comments]

Hi, I chose this provoking title on purpose. I am pretty fresh with a small amount of experience (5 years). Our current team lead left the company to look for a different opportunity for his last ten years before retiring. He’s been here for 20+ years and wanted a new experience before enjoying his retirement. Anyways, our CIO told me he sees potential in me and already gives me great challenging projects as he is confident in me. Obviously, I aspire to be the team lead I’ve ever wanted. But I have no idea what my proper duties are. We are a small ish company (250 employees) and I have 5 people under me. As I am pretty young (almost 30 yo), I find it difficult that the older guys will listen to me. Anyone has tips for me? I feel this is the right step into the direction I want to go in. I got a new contract with a good added amount of money and I see me being here for many more years. Sorry for the rambling, I’m a bit nervous. Our CIO will announce his decision in the next week. Thanks and have a great weekend! submitted by /u/DoubleShotStrong [link] [comments]

Hello, I was able to configure the extension and when I distributed the extension with team they are not redirecting to microsoft idp instead of that they are moving to quick sso, so i am getting error of “something does not compute” Please help us here, i have opened the support but as we don’t have business plans it will take days to be get response team. I am not able to find any documentation as well, AWS document only shows the entra setup create extension and distribute to user but i think it is not working for me. If someone here has already setup that please help me submitted by /u/minor_one [link] [comments]

https://preview.redd.it/bhyfdt5t9pgh1.png?width=1920&format=png&auto=webp&s=e13f6a15dac958b9f4dbcf651a8ef954cf940098 A production server rebooted after an unattended kernel update, which made me rethink how Linux patching should work in production. Rather than just disabling unattended-upgrades, I designed a patch management system around controlled promotion and governance. The approach uses: Aptly for internal package mirrors and immutable snapshots PostgreSQL to enforce promotion gates and maintain an audit trail Grafana for fleet health and CVE visibility Two-phase rollback to revert both the repository and client packages I wrote a detailed article covering the architecture, design decisions, and trade-offs: BLOG: 2ssk.medium.com/patch-management REPO: 2SSK/patchops I'm curious how others handle patch governance. Do you use internal mirrors, Landscape, Satellite, Foreman, Custom tooling, or something else? What has worked well (or poorly) in your environment? [AI has been used in drafting this post] submitted by /u/ban_rakash [link] [comments]

Any One has any solution on how to solve this error . I am on free tier as of now submitted by /u/Sad-Variation-2598 [link] [comments]

My boss gave me three older workstations to use as a Proxmox cluster. Older in the sense that they are of the DDR3 era anyway he also gave me a UPS and bought two FS 16 port switches for me to set up in an MLAG configuration and learn from my home. Anyways, I was commenting on how I wish I had a PDU to remotely power on and off machines as sometimes like I had to get out of the house and I was working on a net boot project, which meant that if it didn’t work, I had to go home and physically restart the machine lol. Well, he went in the basement of his house and found these two older Minuteman 1600s with the SNMP card in both of them. I was able to find drivers, the Manuel, and even the SMP software for Windows thanks to the Internet archive/Wayback machine they function perfectly and so I’m just wondering, how great of a PDU is this? Is it even technically a PDU I currently have it plugged into my UPS, but since I’m terrified of ruining it, and I know search protectors can be an issue, I wanted to see if anyone who might be familiar with these older machines had any insights or things I should know or do in regards to configuring them or setting them up in a specific configuration We also just got to Pixel 10a’s to run GrapheneOS on as he’s pretty big on privacy and security. He bought them out right so they’re unlocked, but if there’s anything I should know in regards to setting that up, it would also be appreciated. I’m well familiar with flashing custom ROMa and such but things have changed since I was running cyanogen mod on my Samsung Galaxy Nexus lol. Thanks in advance to everyone in this community for making me feel welcome and reassuring me that I’m in the right place because some of that imposter syndrome has seriously lifted as I’ve begun to work with my first clients and projects that will actually be used in prod. submitted by /u/drake90001 [link] [comments]

Hey everyone, I recently published a technical walkthrough on the Google Cloud Blog around hardening IAM access using IAM Conditions . If you've ever struggled with binding built-in roles (like Project IAM Admin or MCP Tool User roles) to principals while restricting them to only subset of permissions or resources because of lack of support for resource-level bindings or API granularity, IAM conditions will fill that gap for you. Key patterns covered: Scoping projectIamAdmin : For example, instead of giving a builder service account (SA) unrestricted power to assign any role at deployment time, you can use the CEL function iam.googleapis.com/modifiedGrantsByRole to restrict the SA so it can only grant a predefined list of roles (e.g., BigQuery job user, Cloud Trace agent, Logging writer). Included both gcloud CLI and Terraform snippets. Restricting Model Context Protocol (MCP) Tools: The roles/mcp.toolUser role grants access to all MCP servers in a project. Using api.getAttribute('mcp.googleapis.com/tool.name', '') , you can constrain access down to specific tools (like mcp_bigquery-mcp_execute_sql_readonly ). Contextual & Time-Based Access: Brief examples of restricting execution windows using request.time (e.g., weekdays during business hours). Read the full post here: https://cloud.google.com/blog/topics/developers-practitioners/generosity-under-conditions-hardening-google-cloud-access-management/ Curious how others here handle IAM admin restrictions or fine-grained MCP tool access in production? Let me know your thoughts or feedback! submitted by /u/m1nherz [link] [comments]

I’ve been working on an open-source reference implementation of an agentic DevSecOps container-release pipeline. The goal was to keep security decisions deterministic while using an AI agent only to explain findings, prioritize remediation, and make scanner output easier for engineering teams to act on. The pipeline includes: zSonarQube source-code and quality analysis Trivy Dockerfile and Kubernetes misconfiguration scanning Local container-image build Trivy vulnerability and embedded-secret scanning Deterministic release-policy evaluation Claude Sonnet 5 or Google ADK advisory triage HTML, PDF, Markdown, JSON, and SARIF reports Email delivery through Resend Discord notifications Protected human approval Docker Hub publishing only after authorization For the demonstration, the workflow processed an intentionally insecure training fixture and found: 13 SonarQube findings 25 configuration misconfigurations 347 container-image vulnerabilities 372 total Trivy findings 74 policy-blocking findings The workflow continued scanning long enough to collect complete evidence, but the deterministic policy kept the release BLOCKED . Human approval and image publishing were skipped. The Claude advisory successfully analyzed a bounded subset of the scanner evidence. It prioritized remediation and explained possible attack paths, but it could not approve, reject, waive, or override the deterministic policy. The design principle is: The pipeline generates three primary reports: Code and configuration security report Container vulnerability and secret report Consolidated release-security report Repository: https://github.com/DevOpsAIguru123/awesome-agentic-devops/tree/main/agents/container-image-release-advisor Demonstration run: https://github.com/DevOpsAIguru123/awesome-agentic-devops/actions/runs/30590931717 This is an open-source reference implementation rather than a universal production template. Production adoption would require organization-specific policies, isolated builds, artifact signing, provenance, registry controls, and continuous monitoring. I’d appreciate feedback on: Whether AI advisory analysis belongs inside the release pipeline or should run asynchronously How you deliver security findings without overwhelming developers Which additional supply-chain controls you would add Whether a deliberately blocked security workflow should appear red or use a successful “blocked as designed” conclusion submitted by /u/Individual_Walrus425 [link] [comments]