Operations | Monitoring | ITSM | DevOps | Cloud

qovery

Strengthening the Security of Qovery's Access to Your AWS Account

Oct 23, 2026 By Romain Gerard In Qovery
Qovery now sends your organization ID as the sts:ExternalId when it assumes the IAM role in your AWS account, and the role's trust policy only accepts it on behalf of your organization. Your role is already updated. If you manage it with the qovery-role-creation CloudFormation stack, update the stack to the latest template. Romain is a staff engineer at Qovery working on the control plane and AI integrations. He writes about distributed systems, incident response, and MCP-based tooling.
Read Post
AI Visibility Checkers for Engineering-Led Teams: 7 Best in 2026

AI Visibility Checkers for Engineering-Led Teams: 7 Best in 2026

Oct 23, 2026 By OpsMatters In OpsMatters
Somewhere in your edge configuration there is a rule nobody remembers writing, and it is deciding whether ChatGPT can read your documentation. That is the thesis of this list: AI visibility, meaning whether assistants such as ChatGPT, Gemini and Perplexity name your product when a buyer asks for one, has become partly an infrastructure problem, and the two failure modes that matter most sit on the engineering side of the house. The first is reachability, because a WAF default that returns 403 to GPTBot or ClaudeBot removes you from retrieval as surely as a robots.txt disallow.
Read Post
3 Best Companies for Custom Warehouse Software Development

3 Best Companies for Custom Warehouse Software Development

Oct 23, 2026 By OpsMatters In OpsMatters
Custom warehouse software exists because off-the-shelf doesn't always cut it. Businesses use it for inventory management, daily operations coordination, and better order fulfillment. Standard warehouse management systems (WMS) cover common processes - but specialized workflows, multiple facilities, complex integrations? Companies dealing with those often need a solution built specifically for them.
Read Post
cortex

Policy as code for AI coding: How to turn engineering standards into guardrails for AI agents

Oct 22, 2026 By Mike Vanbuskirk In Cortex
Key Takeaways Engineering standards exist in every organization. They cover how services communicate, how secrets are managed, who reviews changes before they merge, and what "production-ready" means. The problem is where those standards live: wiki pages, onboarding docs, the memory of whoever happens to review a pull request that day. Conventional enforcement depended on reviewer knowledge, which varied across teams.
Read Post
Cycle

One Platform, Three Borders: Multi-Tenancy Isolation on Cycle

Oct 22, 2026 By Cycle In Cycle
When it comes to multi-tenancy isolation, most platforms only support one approach, and you have to make it work for every customer. Usually that means either all tenants share the same infrastructure and rely on the application to keep them apart, or every customer gets a separate stack that your ops team has to deploy, patch, and monitor on its own. Both approaches work. The trouble is that they're rigid.
Read Post
certkit

Internet2's certificate authority (eMudhra) is being distrusted

Oct 22, 2026 By Todd H. Gardner In CertKit
On Tuesday, October 27, Chrome will distrust an eMudhra root certificate, emSign ECC Root CA - G3. Mozilla already did. Most of the people who have to deal with it run IT at American universities. They get their certificates from InCommon, the certificate service Internet2 runs for higher education. The certificates say Internet2 on them, but since April, eMudhra, an Indian certificate authority, has issued them.
Read Post
logz.io

PHP2Shell: What the Critical PHP Vulnerabilities Mean for Your Servers

Oct 22, 2026 By David Lotan Bolotnikoff In logz.io
TL;DR On October 21, 2026, PHP released emergency patches for two critical flaws known together as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). An attacker with no credentials can use them to run code on a PHP web server, in some cases with a single HTTP request. Upgrade to PHP 8.2.35, 8.3.36, 8.4.27 or 8.5.12 now. Then go through your logs, because exploitation attempts were recorded before the patch shipped. In this post.
Read Post

Managing Collectors at Scale: OpAMP and Fleet Management (Grafana OTel Community Call #11)

Oct 22, 2026 By Grafana In Grafana
In this episode of the Grafana OTel Community Call, we're joined by Bejal Lewis and Paschalis Tsilias from Grafana Labs to talk about OpAMP, the Open Agent Management Protocol, and what it takes to manage OpenTelemetry Collectors at scale. We'll cover what OpAMP is and why fleet management matters, where the spec stands today (it's still pre-release), and what it was like building production tooling on top of it.
View Video
control plane

The Best Cloud Migration Tools and Services in 2026

Oct 22, 2026 By Noah Grinstein In Control Plane
The best cloud migration tool depends on what you are moving, from where, to where, and whether you can afford downtime. Native tools (AWS Transform MGN, Azure Migrate, and Google Cloud Migration Center) move servers into their own cloud. Replication tools move VMs and data with minimal downtime. Kubernetes tools move containerized apps. Platforms like Control Plane let you run the same workloads in the old and new environment at once, so you cut over gradually.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.