TLDR DevOps 2025-11-24

Are you providing bonuses for script development? Holding team automation contests? How about providing time-based script dev perks?

If you're not getting your team involved in automation, you're missing out on their ideas. This N-able playbook lays out a framework for making automation a collaborative venture.

Inside, you'll find:

• A clear strategy for implementing IT automation that delivers real impact
• Key areas where automation drives the most value—like patching, onboarding, and alert response
• Practical advice for managing team adoption and driving buy-in
• Free ready-to-use scripts for failed login detection, BitLocker management, screen locking, and more

Get the playbook

AWS CloudFormation Stack Refactoring, announced today, lets users reorganize their stacks in the CloudFormation console by moving resources between stacks, renaming logical IDs and decomposing templates without disrupting underlying infrastructure. This new console experience extends the AWS CLI experience. It is available in all commercial AWS regions.

AWS has announced VPC encryption controls, a new Amazon VPC capability that audits and enforces encryption in transit for all traffic within and across VPCs in a Region. With monitor and enforce modes, organizations can gain centralized visibility and control over encryption status, identify resources allowing plaintext traffic, and ensure all future resources are created on compatible Nitro instances.

Grafana users can now correlate third-party data sources with Grafana Cloud using the correlation feature in Grafana 12.3. Users can jump from a chart to logs or traces with one click. The time range and label values are carried automatically, so there is no copying and pasting or need for new agents.

Kubernetes supports in-place Pod resizing, allowing CPU and memory resources to be updated on running Pods without restarting them, with kubelet and the container runtime handling changes asynchronously. The feature, fully enabled by default in v1.33, includes a resize subresource, status tracking, and policies for restarts. Limitations remain for swap usage, Windows nodes, QoS class changes, and certain container types.

Software engineers can improve productivity with AI tools by adopting a development process that includes prompting, planning, producing, and refining. This approach involves breaking tasks into actionable chunks, managing context, and using steering documents to guide the AI, ensuring sustainable code and maximum productivity. The habits you build and the workflows you develop will help you stay ahead of the curve as AI tools evolve.

This post describes an automated Azure DevOps pipeline that scans a repository for YAML files and imports them all into Azure DevOps automatically, eliminating the need for manual creation. The self-contained PowerShell-based solution preserves folder structure, prevents duplicates, supports dry-run mode, and uses built-in variables for zero configuration setup.

A million-line migration would take most teams months, but Uber did it in just two weeks. Using OpenRewrite and AI-assisted static analysis, they automated 4,000 pull requests and modernized 1 million lines of code - safely. In the upcoming Moderne webinar, their engineering team will share the full story. Join live

trifold is a tool that serves static websites using a content delivery network (CDN).

Server Survival, a 3D simulation game, puts players in the role of a Cloud Architect tasked with building a resilient cloud infrastructure and managing budgets while fighting off DDoS attacks. Players can use a toolbar to build their architecture, balancing the cost and upkeep of each service to survive as long as possible and maintain their budget and reputation.

Yelp implemented object-level logging on its Amazon S3 buckets to improve data security, troubleshoot permission issues, and identify unused data for deletion, after AWS added essential features like date-based partitioning for S3 server access logs in November 2023. By converting raw logs to parquet format, Yelp reduced storage size by 85% and the number of objects by 99.99%, also using a single AWS account for querying between different accounts. The company uses access-based retention to delete unused objects. It is planning to forward S3 server access logs to Splunk for more efficient troubleshooting in the future.

Infrastructure drift occurs when live cloud resources diverge from Terraform configurations, causing security gaps, compliance violations, and significant unexpected costs. Implementing continuous drift detection using tools like Terraform plan, Driftctl, or Spacelift enables automated alerts, reconciliation, and code alignment, reducing financial waste, maintaining compliance, and ensuring infrastructure matches declared state.

The mainframe is thriving! Big Iron Bits: a Mainframe Mockumentary explains why everyone still needs Big Iron. Think The I.T. Crowd meets Silicon Valley. Start watching now

The Kubernetes Guardrail Extension validates YAML files directly in GitHub and GitLab, giving developers instant, in-browser feedback on compliance and security best practices before commit.

Using CSV files to define Azure Firewall, NSG, and route table rules allows Terraform to dynamically generate resources, reducing code clutter and simplifying bulk updates.