CodeIsGo.com

Securing and protecting enterprise data is at the center of the modern security plan. There are many considerations for organizations that aim to move critical workloads and data stores to the cloud, and understanding how business-critical data will be accessed, stored, and secured is a paramount concern. Written by Chris Steffen.

In an exclusive research study conducted for IBM, Enterprise Management Associates recently polled over 200 technical leaders and practitioners from organizations of 500 employees or more. They represented industries from 10 different verticals, providing an excellent cross-section of organizations, all impacted by data privacy and security in different ways.

Some key takeaways from the study include:

• Data Security: Nearly all of those surveyed (95.1%) indicated that data security is a critical or very important factor in their organizations
• Zero Trust: In this survey, 73% of organizations were investigating or planning to launch a zero trust project
• Security Tools: Of organizations surveyed, 64% report that two or more of their tools are at least somewhat redundant, and 75% currently use three or more tools to secure their hybrid multi-cloud environments
• Security Silos: While 56% of respondents said that they are working to break down barriers

For more follow the link to the full article. Good read!

How do I start using WebAssembly That’s exactly what we’re going to address this time around. The author is going to demonstrate how to get started with this technology. By Jack Wallen.

Let’s get on with the steps toward your first WebAssembly app. The article covers:

• Install the necessary dependencies
• Install Emscripten
• Create your Hello, World! (with source)
• Compile the source code

Emscripten is open source software that compiles projects written in C or C++ – or any language that uses LLVM – to browsers, Node.js, or wasm runtimes. The Emscripten SDK profiles all of the necessary tools (such as Clang, Python, and Node.js), as well as an updated mechanism to enable migrating to newer versions of the toolchain as they are released.

You will also get commands and step by step process how to use the emcc compiler to take your C code and turn it into a WebAssembly (WASM) HTML file. Short but sweet!

The Kubeflow project was announced back in December 2017 and has since become a very popular machine learning platform with both data scientists and MLOps engineers. If you are new to the Kubeflow ecosystem and community, here’s a quick rundown. By Jimmy Guerrero.

In the article you will get the link to video in which author will demonstrate the following:

• Launch a MiniKF AMI from the AWS Marketplace
• Configure the instance for MiniKF
• Deploy all the necessary components including Kale and Rok
• Bring up the Kubeflow UI to start your first project

Kubeflow is dedicated to making deployments of machine learning (ML) workflows on Kubernetes simple, portable and scalable. In a nutshell, Kubeflow is the machine learning toolkit for Kubernetes. As such, anywhere you are running Kubernetes, you should also be able to run Kubeflow. You will also get links to further resources and reading related to Kubeflow. Good read!

Machine learning is still harder than it needs to be. The open-source tool ModelDB and the ML model management platform Verta can help. By Matt Asay.

The artificial intelligence/machine learning software development and deployment lifecycle is still very nascent. The challenge of moving models into production is exacerbated by a demand for speed and a shortage of qualified ML engineers. But there’s hope that things may soon get better.

There’s a need for MLOps: We’re still early enough in ML that it lacks the mature tooling and workflow processes of traditional software development. There, concepts like agile development and continuous integration and continuous deployment let entrenched companies and scrappy startups push new features to market quickly.

Many machine learning solutions are actually assemblies of models. They run several models to get one prediction. Then, after all that, data scientists need to monitor model performance, retrain when needed and redeploy. Interesting read!

Simon Humphreys shares how Raspberry Pi’s ARM processor makes it a great tool for A level students to get their hands dirty with assembly language.

Assembly language programming is on every university computer science course and also in numerous advanced level courses - so it must be important! The instruction set for the UK’s AQA A level is akin to the ARM instruction set used on the Raspberry Pi, making it a great tool for bare-metal programming.

The article main points:

• Why learn assembly language?
• Where next?
• A simple example

Once the students know how to write an equivalent ‘if–then–else’ construct and how to branch, it becomes relatively trivial to introduce loop constructs such as ‘do–while’, which have a conditional expression at the bottom of the loop and need to jump back to the top of the loop. Very interesting!

As a good developer, I have my code in a repo, that doesn’t necessarily mean that I have followed all of the best practices that I should. I can still expose myself to risks unknowingly. By April Edwards.

Often in tutorials or getting started guides, we try to make the code and directions as easy as possible for anyone to be able to follow. While this is great for the community, sometimes while we make things easy to get started, but do not consider the impact it can have on the consumer. Meaning, I have deployed my Azure Static Web App, but exposed myself to what could a potential security risk for myself or my organization. In hindsight, we need to make sure our tutorials are fit for purpose and production.

While I have protected my secrets following all of the best practices, what if I hadn’t? What if another developer in the team hadn’t? We deployed our Azure Static Web App and could have potentially exposed critical information externally.

As a developer, we should ALL care about security. We want to ‘shift left’ and implement security early. While nothing obvious sticks out, we don’t have any exposed secrets in my YAML, we’ve done all the things right. But wait… We haven’t. Follow the link to full article to learn what was the security issue about. Nice one!

More than ever before, present day businesses want their IT systems to constantly evolve and be capable of responding positively to the changing goals and priorities. As they say, change is the only constant. In this context, microservices have become the proverbial Holy Grail for solution architects to design and build modern software. By Nikhil Mohan.

Inter-service communication is one of the most critical design elements in a microservices-based solution that needs careful consideration. RESTful API carrying data in JSON is widely adopted as the most common communication pattern for connecting microservices together.

However, this approach is suboptimal in the following scenarios:

• REST is resource-oriented. This can be a limiting factor while dealing with API flexibility
• JSON payloads are human-friendly, but they are bulky and not machine-friendly. Therefore, JSON payload parsing is compute-intensive
• Data transfer in HTTP 1.1 is text-based and involves no compression of request headers. This results in high bandwidth utilization

gRPC is an open source framework developed by Google and currently managed under the aegis of Cloud Native Computing Foundation (CNCF). gRPC does all the heavy lifting work for inter-service communication leaving developers with only the task of defining a contract for remote procedure calls in a language-neutral format. Moreover, gRPC is action-oriented, thereby helping developers to design flexible APIs.

• gRPC uses HTTP/2 under the hood. HTTP/2 helps gRPC to overcome some of the limitations with REST over HTTP 1.1
• HTTP/2 is based on binary data transfer making it highly bandwidth-efficient
• HTTP/2 does header compression, again helping network bandwidth utilization
• Language independent. Very ideal for a polyglot microservices architecture
• Supports streaming communication pattern
• Easy to plug in features such as authentication, load balancing, logging, and monitoring

Architects like to view modern systems as a collection of numerous cloud native components. Being cloud native is fundamental to the solution, irrespective of whether the target solution is planned for cloud or not. Follow the link to the full article to see example design for movie finder application using gRPC. How interesting!

Many CEOs and senior business leaders have used the COVID-19 and economic crisis as an opportunity to focus on redesigning their business. Like others, they’ve felt compelled to re-examine their business and operational models, driven by the internal necessity for digital transformation, as well as external consumer and regulatory pressures to advance sustainability efforts. By Kristen Hicks.

The pandemic has also elevated the priority of social issues among executives, with consumers and employees alike granting greater credibility to corporate transparency in shareholder disclosures and the environmental impact of global operations.

The first step towards building an effective sustainability strategy is to define it for your business. Establish a shared understanding of what sustainability looks like across your organization, and how each department contributes to the overarching goal.

Lucas Joppa, Microsoft’s Chief Environmental Officer, shared Microsoft’s sustainability report outlining how we’re making steps towards sustainability in our own businesses, working toward being carbon negative by 2030 and removing historic emissions by 2050. Gartner refers to sustainability as a “mission-critical priority,” and with good reason. With the growing risk that climate events pose to financial assets and global supply chains, and the weight of consumer social sentiment, to not take action on sustainability efforts would mean to increase the risk of both business disruption and customer churn. Rather than overlooking or minimalizing this effort, consider how adopting a sustainability strategy can accelerate your business growth and generate new opportunities. Good insights!

With JAMstack, your entire site is pre-built as static HTML files and hosted on CDN. Since those static files are served via CDN, it’s blazing fast, scalable, and more secure as there is no backend servers and databases. By Ryuta Hamasaki.

In this post, author will walk you through how to build a static version of your Laravel app and deploy it to Netlify. The article captures how to:

• Install Laravel Export
• Setup Netlify CLI
• Hooks
• Query params are not supported

You can build the entire Laravel app as a static site and deploy it to Netlify from your local machine. You don’t need to setup a full-fledged server for hosting your backend app and database. And here is the full source code of the sample Laravel blog application that author created. Good read.

I know that you might be thinking: is this blog really help you to start your open-source journey? By Roli Gautam.

In this article the author covers:

• What is an open source?
• Why should you contribute in an open-source program?
• Who can Contribute? What do you need to participate in an open-source program?
• How to get involved in an open-source program?
• How to choose an open-source project?
• Create your first issue
• What can you do to get assigned that issue to you?
• How to start working on the project?

… and more. There are plenty of reasons to get involved in the open-source community including opportunity to learn new skills, share your knowledge, gain experience in real-world development, build your networking with like-minded peoples. The article will also walk you through useful git commands you will most likely use when contributing to open-source project. Check this article for the resources and links to open-source programs and open-source competitions. Good read!