Digest #164: GitHub Actions Pain, Wiz Joins Google, Handling Billions of AWS Lambda Invocations, CDK Migration and Prometheus

GitHub Actions issues, Wiz joining with Google, Terraform security warnings, and compromised GitHub actions—plus clear tips on AWS Lambda, Grafana, Prometheus scaling, and cool open-source tools.

Welcome to this week’s edition of the DevOps Bulletin!

Wiz teams up with Google—what does this mean for cloud security? We take a closer look at compromised GitHub actions and explore ephemeral values in Terraform.

Our featured podcast is about best practices for building a multi-tenant system. We’re also sharing an upcoming event on the future of DevOps and how to build a strong culture to shape better software delivery.

In our tutorials, learn how to handle billions of AWS Lambda invocations, build a powerful March Madness dashboard with Grafana, migrate smoothly from Serverless Framework to AWS CDK, and master data governance using dbt, Terraform, and Dataplex. Scaling Prometheus to the enterprise level, building data ingestion solutions for Amazon Bedrock, and securing Lambda function logs through data masking were also covered.

We’re also spotlighting practical open-source tools, including Stelvio, a Python library that simplifies cloud infrastructure management; Adminer, a simple and ready-to-deploy database management tool; mcp-kafka, which connects AI assistants directly to Apache Kafka; git-who, a handy CLI to quickly discover who wrote specific code; and KHI, a rich log visualization tool that displays Kubernetes logs in an interactive timeline.

All this and more in this week’s DevOps Bulletin—don’t miss out!

Newsworthy Stories

• The pain that is GitHub Actions

• Wiz joining Google

• Dear hosters, you are selling wood, not furniture

• Ephemeral values in Terraform

• tj-actions/changed-files action is compromised

In partnership with Bitrise

DevOps evolution: what's next in 2025?

Get actionable strategies for AI, platform engineering, & DevOps culture to shape software delivery.

Save your seat

Podcast of the week

Tutorials of the week

• Handling billions of AWS Lambda invocations

• How to build the ultimate March Madness dashboard in Grafana

• Migrating from Serverless Framework to CDK

• Data governance with dbt, Terraform, and Dataplex

• Scaling Prometheus from single node to enterprise-grade observability

• Selective asynchronous commits in PostgreSQL

• Building a data ingestion solution for Amazon Bedrock knowledge bases

• Data masking of AWS Lambda function logs

Projects of the week

• Stelvio is a Python library that simplifies cloud infrastructure management and deployment.

• Adminer is a full-featured database management tool written in PHP. It consists of a single file ready to deploy to the target server.

• mcp-kafka provides a bridge between AI assistants and Apache Kafka, allowing them to interact with Kafka clusters through the Model Context Protocol.

• git-who is a command-line tool for answering that eternal question: Who wrote this code?

• KHI is a rich log visualization tool for Kubernetes clusters. KHI transforms vast quantities of logs into an interactive, comprehensive timeline view.

Meme of the week

If you have feedback to share or are interested in sponsoring this newsletter, feel free to reach out via LinkedIn, or simply reply to this email.