Operations | Monitoring | ITSM | DevOps | Cloud

When it comes to risk management in banks, cloud-based computing offers significant advantages. On the other hand, risk managers will have a tough time making the switch from on-premises to the cloud.

A key finding from Redgate’s recent State of Database Monitoring Survey of over 2,500 IT professionals was that 79% of respondents reported using either a third-party or in-house monitoring tool. It’s notable because it’s an increase of 10 percentage points from the same survey last year – and the satisfaction rate with third-party monitoring tools also saw an increase of 18 percentage points to 86%.

Since we launched Puppet Comply last year, we’ve been working hard to build out the solution’s capabilities so that we can provide our customers with more options in implementing a continuous compliance program, and become more proactive and efficient in how they manage compliance. A key activity in any strong continuous compliance program is remediation.

Cloudflare just announced Cloudflare R2, a cloud object storage service with some incredible features. Keep in mind, it is currently in early access so we don’t know everything yet. Cloudflare R2 promises to solve three main problems that make incumbent providers like Amazon S3 more complicated: It also offers a supposedly easy migration from S3-compatible storage buckets, and automatic replication of “blobs” across the world. In this post, I’m going to cover the following: ‍

Cloudflare R2 is a new cloud object storage provider with an eye towards stealing market share from Amazon S3 by offering cheaper object storage that is S3-compatible. This value proposition resonates with many developers because Amazon S3, while powerful and deeply embedded with the rest of the AWS ecosystem, is expensive to use. AWS has also not made any price reductions for Amazon S3 since 2016, whereas some of its other staple services have seen significant price reductions.

Modern software development increasingly relies on distributed, service-based architectural patterns to achieve scalability, reliability, and rapid build, test, and release cycles. Two of the most popular service-based approaches are service-oriented architecture (SOA) and microservices. In this article, we will examine both approaches to identify their similarities and differences as well as some use cases for each.

Kotlin is one of the most versatile programming languages available, in large part because of the Kotlin team’s focus on bringing it to as many platforms as possible. It is the primary language for developing Android applications and is popular for JVM backends. Kotlin also features targets for native binary compilation with Kotlin/Native, and for web through Kotlin/JS. One of its most promising features is the ability to target multiple platforms it compiles to.

Apache has disclosed a critical actively exploited path traversal flaw in the popular Apache web server, version 2.4.49. This path traversal means that an attacker can trivially read the contents of any file on the server that the Apache process has access to. This could expose highly sensitive information, even as critical as the server's own private SSL certificates. See the Sonatype blog for more technical information on the vulnerability.