TL;DR — Key Takeaways Wheely extracted push, SMS and status notifications from its Ruby monolith into a centralized, stateless Go service after fragmented delivery logic became difficult to scale and manage. When its shared RabbitMQ cluster struggled with large campaign spikes, the team used MongoDB as a persistent polling queue with atomic task claiming, retries, exponential backoff, idempotency and dead-letter handling. The new architecture handled several times the previous peak volume without broker-related delivery failures, but introduced polling latency, database overhead and additional functionality for the team to maintain A back-end team extracted notification delivery from a large Ruby monolith…
Author: drweb
Disclaimer: Built with Claude Code Introducing azsql-migration-test, a small open-source CLI that validates your Azure SQL Database migrations against a local Azure SQL Database Developer container — the same engine as the cloud, running on your machine.The problem: proving a migration works shouldn’t require the cloudIf you run Azure SQL Database, you want to know a schema migration will succeed before you apply it in production. But the honest way to be sure has always meant testing against a live Azure SQL Database — which means a subscription, cloud spend, and slow round-trips every time you tweak the migration.So validation…
TL;DR — Key Takeaways Claude Code helped deliver an AI-powered web feature in roughly two weeks by accelerating codebase understanding, implementation and debugging. The main risk was not whether AI-generated code worked, but whether it matched the existing architecture, reused shared components and avoided technical debt. Real-world testing uncovered a serious memory issue that AI had not identified, reinforcing that production readiness still depends on human judgment and validation. When Photify AI was removed from the App Store, our team had about two weeks to preserve one of its core capabilities: AI-powered photo and video generation. The fastest path was…
TL;DR — Key Takeaways CloudWatch is moving beyond reactive dashboards with AI-driven anomaly detection, proactive insights and guided incident investigations. S3 Tables and Apache Iceberg let teams build scalable, lower-cost log lakes for long-term analysis across Athena, Redshift and Spark. GenAI monitoring and AI-assisted Five Whys analysis help teams track LLM costs, diagnose RAG latency and reduce incident resolution time. Traditional monitoring often meant chasing alerts and toggling between dashboards after an issue had already impacted users. AWS CloudWatch — long the backbone of metrics, logs and traces on AWS — is evolving past that reactive paradigm. The latest CloudWatch…
I have been asked many times about how the name “Data on Wheels” came to be. I decided that is a good topic to ramble about, so here goes.An origin storyBy the end of 2010, I had been presenting on technology for over four years including PASS Summits. While I was building out a decent reputation as a speaker, I didn’t have an online presence. I needed a blog.I decided to kick off a blog in December 2010. But I needed a name for my blog. Something cool. After looking at bunch of peers’ blogs and Twitter handles, I landed…
TL;DR — Key Takeaways Separate dev, staging, UAT and production into individual AWS accounts, with a dedicated shared-services account hosting centralized ECR repositories. Use tightly scoped GitHub Actions OIDC roles, cross-account pull permissions and automatic image scanning to strengthen access control and vulnerability management. Promote the exact same container image through every environment by retagging rather than rebuilding, preserving traceability and supporting SOC 2 change-management controls. CI/CD pipelines make developers’ lives easier and let them ship changes to end users faster. However, they are also part of compliance frameworks such as SOC 2, which require careful design to satisfy specific…
TL;DR — Key Takeaways AI is dramatically increasing the volume of Terraform, Kubernetes and cloud configuration code, but only about 55% of AI code-generation tasks produce secure code by default. Infrastructure vulnerabilities can expose entire environments, making governance of AI-generated IaC a platform engineering responsibility rather than only an AppSec concern. Mature teams are moving controls upstream through policy as code, scoped agent permissions, automated drift correction and compliance validation during generation. AI agents and coding assistants now generate a growing share of the Terraform, Kubernetes and cloud configuration code running in production, but the security quality of that code…
TL;DR — Key Takeaways Coverity is moving closer to AI-native development workflows with a new MCP server that lets coding agents run local security and quality scans. Security prioritization gets sharper with a new impact lens designed to help teams focus on the issues that matter most for compliance. Black Duck is expanding vulnerability coverage with a new checker for Insecure Direct Object Reference (IDOR) flaws in JavaScript and TypeScript. Black Duck has updated its Coverity static analysis code scanning tool to provide deeper integrations with artificial intelligence (AI) tools along with updates to its user interface that make it…
Continuous software delivery in the digital age has come to depend on CI/CD pipelines. They enable engineering teams to rapidly develop, test, and deploy code while keeping it highly usable and consistent across environments. CI/CD pipelines, however, can themselves become a source of friction as systems start at a small scale and become more complex. Pipelines set up to work for small projects have difficulty scaling with ever more repositories, ever larger test suites, and ever larger development teams. Slow feedback cycles, increased infrastructure costs, and decreased developer productivity are some by-products of bad pipeline design.Here are 10 CI/CD pipeline…
Fabric’s inbound network protection gives you two tenant-level controls: Private Link, which routes traffic through your virtual network instead of the public internet, and Block Public Internet Access, which closes the public internet off entirely once Private Link is in place. Together they look like the obvious move if you’re trying to get a data platform off the public internet. Flip two settings, close off the internet, ship a more secure platform. That’s the pitch.As of July 2026, it isn’t that simple. Enabling them changes how a specific, and fairly long, list of Fabric features behaves. Some keep working but…