September 2020 cloud-native news

Hello, from all of us at Sysdig!

September has been a busy month in the cloud-native community. We, at Sysdig, are excited to announce the first automated image scanning solution for AWS Fargate, and threat detection using AWS CloudTrail. Don’t miss our cloud-native highlights!

• Customer spotlight
• Industry buzz
• What’s new in the community?
• What’s new with Sysdig?
• Meet us online

---

---

Ping us @sysdig or on our open-source Sysdig Slack group to share your feedback and suggest topics for future issues! Previous editions are in the archive.

Customer spotlight

Industry buzz

Lessons learned from running Kubernetes in Production

Advice from companies that are running Kubernetes in production: Cognizant has been running Kubernetes for three years, and GitLab for one year.

Secure at every step

Discover what software supply chain security is and why it matters.

Your team is running containers, but are they secure?

How do you know your team put effective security and compliance controls in place? . Learn security best practices from our CEO.

5 biggest outages of Q2 2020

One of the cloud benefits is high availability, however, it’s not infallible. What can we learn from the five biggest outages from this year?

What’s new in the community?

AWS Bottlerocket, a Linux distribution built to run containers

Bottlerocket brings built-in security hardening and a transactional update mechanism to decrease operational costs. Sysdig was a launch partner.

Service proxy, pod, sidecar, oh my!

Learn the sidecar pattern by example: Using envoy proxy to mitigate HTTP errors.

Docker best practices with Node.js

Node.js is an ideal language to build cloud applications. Discover best practices to build node containers.

Kubernetes clients and dashboards: a comparison

Looking for a dashboard to manage Kubernetes? This comparison might help you.

Containers are trending!

There has been a lot of news on container registries and formats this month:

• GitHub announced a container registry.
• Amazon ECR now supports OCI Artifacts.
• Now, there’s a standard for WebAssembly OCI images.
• Here’s how to push and pull OCI artifacts from Azure Container Registry.

 

What’s New with Sysdig?

This month we have interesting new features and info on the Sysdig ecosystem, here are some highlights:

Threat detection using CloudTrail with Falco

Our latest release will help you secure your AWS workloads in new ways:

• Implement AWS Threat Detection using CloudTrail and Sysdig Secure.
• The first automated inline image scanning for AWS Fargate.
• Video: It only takes 4 minutes to set up Fargate scanning.
• Video: Sysdig helps you monitor your AWS services.

Secure and monitor AWS Outposts

Sysdig achieved the AWS Outposts Ready designation. Now, we are ready to secure and monitor your AWS Outposts infrastructure and services across hybrid environments, including on-premises.

5 Prometheus exporters best practices

These best practices will help you implement a monitoring solution based on Prometheus, it will also increase your productivity.

Detecting and mitigating CVE-2020-14386

This high severity threat is a kernel security vulnerability that enables an unprivileged local process to gain root access to the system. Discover how to detect and mitigate this vulnerability with Falco and Sysdig Secure.

How to monitor Istio

Learn how to monitor Istio, the Kubernetes service mesh. In this article, you will also learn what metrics you should track, and how to follow A/B deployments.

ISG names Sysdig a leader in both container security and observability

We are excited to be the only company to be named a leader in both the observability and security quadrants on cloud and container solutions!

 

Stay safe. Meet us online: