DevOps "Office Hours" (2025-09-24)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have. You can register here: https://cloudposse.com/office-hours Join the conversation: https://slack.cloudposse.com/ Find out how we can help your company: https://cloudposse.com/quiz https://cloudposse.com/accelerate/ Learn more about Cloud Posse: https://cloudposse.com https://github.com/cloudposse https://sweetops.com/ https://newsletter.cloudposse.com https://podcast.cloudposse.com/ #officehours,#cloudposse,#sweetops,#devops,#sre,#terraform,#kubernetes,#awsdevops Timestamps: [00:00:00] Intro [00:01:06] Announcements [00:01:11] Actions: YAML anchors and non-public workflow templates https://github.blog/changelog/2025-09-18-actions-yaml-anchors-and-non-public-workflow-templates [00:10:05] New setting for delayed dependency updates https://pnpm.io/blog/releases/10.16 [00:11:32] Anthropic: A postmortem of three recent issues https://www.anthropic.com/engineering/a-postmortem-of-three-recent-issues [00:13:08] AWS Organizations supports full IAM policy language for SCPs https://aws.amazon.com/about-aws/whats-new/2025/09/aws-organizations-iam-language-service-control-policies/ [00:14:01] Obtaining Global Admin in every Entra ID tenant via Actor tokens https://news.ycombinator.com/item?id=45282497 [00:15:57] Other News & Announcements [00:16:24] YAML anchors and non-public workflow templates (continuation) [00:17:29] Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM Credentials https://thehackernews.com/2025/09/hackers-exploit-pandoc-cve-2025-51591.html [00:21:50] Add JOB_ env vars #4053 https://github.com/actions/runner/pull/4053 [00:22:56] Q&A [00:23:17] Database Testing Environment Management Strategies [00:27:25 Tonic.ai: Database Dev Environment Tool tonic.ai [00:36:00] GitHub Actions Terraform Security Concerns & AWS Authentication and Security Updates [00:51:45] microsoft/presidio https://github.com/microsoft/presidio [00:54:47] DynamoDB-Free Locking Solutions Discussion [00:56:36] Outro