October 2026 security advisories: GitLab, PHP, Node.js, and certificate trust
Recent security advisories for GitLab, PHP, Node.js, Ruby, Go and Oracle, plus Fortinet updates, the eMudhra certificate incident and Zeabur response priorities.
Cloud Magician
Cloud Magician
Migrate from EKS IRSA to Pod Identity: When and How
Do you need to replace IRSA with EKS Pod Identity? Compare the tradeoffs, then migrate the IAM role, association, service account, and Pods safely.
Root, Intermediate, and Server Certificates: Create and Check a Self-Signed Certificate
Understand certificate chains, create a self-signed certificate with OpenSSL, check validity dates, and troubleshoot missing intermediate certificates.
Amazon ECR Cross-Account Access: Repository and IAM Policies
Grant a specific IAM role in another AWS account pull access to a private ECR repository with repository and IAM policies. Includes AWS CLI and Docker verification and troubleshooting.
Cross-Account S3 Access: Setting Up IAM and Bucket Policies
Set up read-only S3 access across AWS accounts with IAM and bucket policies, restrict access to a prefix, verify it with the AWS CLI, and troubleshoot AccessDenied errors.
Kubernetes Secret vs. ConfigMap: Why Use Secrets If Base64 Isn't Encryption?
Why store credentials in Kubernetes Secrets when Base64 isn't encryption? A practical look at RBAC, encryption at rest, and how Secrets work with credential management tools.
Fixing Secrets Store CSI Sync on EKS: Enable syncSecret.enabled to Create Kubernetes Secrets
Troubleshooting missing Kubernetes Secrets when using AWS Secrets Manager with the Secrets Store CSI Driver, and resolving the issue by enabling the syncSecret.enabled Helm setting.
Zeabur Security Incident Explained: API Key Leak Review and Lessons Learned
A breakdown of the August 2026 Zeabur security incident, covering how OpenAI, AWS, and other API keys were leaked, the official response, and the immediate steps users should take.
Restrict Geographic Access in CloudFront and Automatically Use index.html for Paths
An extension of hosting a static website with Amazon S3 and CloudFront, covering Geographic restrictions and using a CloudFront Function to rewrite extensionless paths to the corresponding index.html.
How to Host a Static Website with Amazon S3 and CloudFront
Learn how to host a secure static website with Amazon S3 and Amazon CloudFront, including Origin Access Control, a private bucket, HTTPS, custom domains, cache invalidation, and Terraform.