# cloud-infrastructure Published articles for cloud-infrastructure. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## First VMmark 4.1 Power-Performance and VMware Cloud Foundation 9.1 Results DevFeed: [First VMmark 4.1 Power-Performance and VMware Cloud Foundation 9.1 Results]() Original publisher: [Read original article]() Author: vmwareblogs Published: 2026-09-16T18:20:25Z Content type: release Language: en Sources: [VMware Blogs]() Topics: [vcf 9.1](), [benchmarking](), [Benchmark](), [virtualization](), [Hardware]() Tags: [benchmarking](), [benchmarks](), [cloud-infrastructure](), [dell](), [efficiency](), [home-page](), [performance](), [vcf-9-1](), [vmmark](), [vmware](), [vmware-cloud-foundation](), [vsphere](), [vsphere-9-1]() ### AI overview VMware reports Dell Technologies benchmark results using VMware Cloud Foundation 9.1 and VMmark 4.1. The article describes VMmark 4.1's power-performance measurement and reports higher performance and tile count for VCF 9.1 than VCF 5.2 in the tested environment. ### Source excerpt We're excited to announce two new VMmark results today from Dell Technologies: First VCF 9.1 Benchmarks: These are the first results using VMware Cloud Foundation (VCF) 9.1. VCF 9.1 maximizes hardware efficiency using a Next-Gen Topology-Aware CPU Scheduler that optimizes memory and cache locality for intensive enterprise workloads. A separate VCF 9.1 evaluation demonstrated a ... Continued The post First VMmark 4.1 Power-Performance and VMware Cloud Foundation 9.1 Results appeared first on VMware Blogs. ## CrowdStrike Announces Agentic Identity Provider DevFeed: [CrowdStrike Announces Agentic Identity Provider]() Original publisher: [Read original article]() Author: Ryan Terry Published: 2026-09-12T11:17:51.295154Z Content type: release Language: en Sources: [Blog]() Topics: [AI Agent](), [Next-Gen Identity Security](), [Authorization](), [Security](), [Authentication]() Tags: [2026](), [agentic](), [ai](), [ai-agent](), [api-keys](), [applications](), [authentication](), [authorization](), [cloud-infrastructure](), [code](), [enterprise](), [identity](), [identity-control](), [next-gen-identity-security](), [saas](), [security]() ### AI overview CrowdStrike announces Agentic Identity Provider, a capability in CrowdStrike Falcon Next-Gen Identity Security that gives AI agents trusted identities and continuously controls their access according to real-time security and business context. The announcement also covers expanded privileged access across SaaS applications, endpoints, code repositories, and cloud infrastructure. ### Source excerpt CrowdStrike gives every AI agent a trusted identity and controls their access based on real-time context, and expands modern privileged access. ## AI-Ready Private Cloud with Cisco and VMware DevFeed: [AI-Ready Private Cloud with Cisco and VMware]() Original publisher: [Read original article]() Author: sabina anja Published: 2026-09-08T15:33:39Z Content type: article Language: en Sources: [VMware Blogs]() Topics: [Artificial Intelligence](), [Network](), [Cloud](), [networking](), [cloud-infrastructure](), [distributed-training](), [datacenter](), [GPU](), [Latency](), [Inference](), [model-deployment](), [inference-endpoints]() Tags: [ai](), [cisco](), [cloud](), [cloud-infrastructure](), [cloud-platform](), [data-center](), [distributed-training](), [fabric](), [gpu](), [home-page](), [inference](), [inference-endpoints](), [latency](), [networking](), [object-storage](), [pipelines](), [private-cloud](), [telemetry](), [vcf-9-1](), [vcf-networking](), [vmware](), [vmware-cloud-foundation]() ### AI overview This article explains why an AI-ready private cloud requires more than adding GPUs. It focuses on how Broadcom and Cisco are integrating VMware Cloud Foundation with Cisco Nexus One Fabric to address AI workload networking, including bandwidth-intensive east-west traffic, bursty north-south traffic, latency, congestion management, and telemetry across virtual and physical infrastructure. ### Source excerpt An AI-ready private cloud is not simply a private cloud with GPUs added to it. What determines whether a private cloud platform can actually serve AI workloads effectively is everything built around them: how the fabric carries traffic, how the tenancy model lets teams consume capacity, and how policy and telemetry stay coherent across the ... Continued The post AI-Ready Private Cloud with Cisco and VMware appeared first on VMware Blogs. ## See How Organizations Achieved 137% ROI with VMware Cloud Foundation 9 DevFeed: [See How Organizations Achieved 137% ROI with VMware Cloud Foundation 9]() Original publisher: [Read original article]() Author: vmwareblogs Published: 2026-09-08T15:00:00Z Content type: article Language: en Sources: [VMware Blogs]() Topics: [Cloud](), [Provisioning](), [systems](), [Security]() Tags: [cloud](), [cloud-infrastructure](), [compliance](), [cost](), [efficiency](), [financial](), [home-page](), [infrastructure](), [legacy](), [private-cloud](), [provisioning](), [survey](), [vcf-9-0](), [vcf-9-1](), [vmware](), [vmware-cloud-foundation](), [webinar]() ### AI overview The article presents a commissioned Forrester Consulting Total Economic Impact study of VMware Cloud Foundation 9. Based on interviews with eight customers and a survey of 55 customers over a modeled three-year period, it describes projected financial and operational benefits for large enterprises running VCF 9 in production, including lower infrastructure costs, reduced operational effort, less downtime, faster delivery, tool consolidation, and improved security and compliance. The title reports 137% ROI. ### Source excerpt Enterprises running private cloud face a common question: what does the investment actually deliver? To answer it, we commissioned Forrester Consulting to conduct an independent New Technology Total Economic Impact (TEI) study on VMware Cloud Foundation 9 (VCF 9). Forrester interviewed decision-makers at organizations running VCF 9 and surveyed additional customers to develop a composite ... Continued The post See How Organizations Achieved 137% ROI with VMware Cloud Foundation 9 appeared first on VMware Blogs. ## Client-Side SDK Generation with VMware Cloud Foundation OpenAPI Specs DevFeed: [Client-Side SDK Generation with VMware Cloud Foundation OpenAPI Specs]() Original publisher: [Read original article]() Author: vmwareblogs Published: 2026-09-07T09:38:44Z Content type: tutorial Language: en Sources: [VMware Blogs]() Topics: [OpenAPI Specification](), [SDKs](), [.NET](), [C#](), [developer tooling](), [Java](), [Python](), [PowerShell]() Tags: [apis](), [cli](), [cloud](), [cloud-infrastructure](), [csharp](), [developer](), [developer-tooling](), [docker](), [home-page](), [java](), [net](), [openapi](), [powershell](), [programming](), [programming-language](), [python](), [rest](), [rest-api](), [sdk](), [specifications](), [vcf-9-0](), [vcf-9-1](), [vcf-sdk]() ### AI overview This guide explains how to generate a strongly typed .NET C# client SDK from VMware Cloud Foundation and vSphere OpenAPI specifications. It covers OpenAPI Generator, installation options, large specification handling, API-surface scoping, and the REST and JSON-RPC interfaces targeted by the example. ### Source excerpt Starting with VMware Cloud Foundation (VCF) 9.0, VMware officially publishes OpenAPI specifications for VCF APIs. This is a major milestone for developers, enabling you to consume VCF APIs using your programming language of choice. VMware provides first-class developer tooling such as VCF PowerCLI for PowerShell users and the VCF SDK offering Java and Python bindings. ... Continued The post Client-Side SDK Generation with VMware Cloud Foundation OpenAPI Specs appeared first on VMware Blogs. ## Get to VMware Cloud Foundation Faster with VMware Pro Cloud Services DevFeed: [Get to VMware Cloud Foundation Faster with VMware Pro Cloud Services]() Original publisher: [Read original article]() Author: paula swanson Published: 2026-09-03T20:21:10Z Content type: article Language: en Sources: [VMware Blogs]() Topics: [Cloud]() Tags: [architectures](), [best-practices](), [cloud](), [cloud-infrastructure](), [cloud-services](), [infrastructure](), [modernization](), [private-cloud](), [vcf-professional-services](), [vmware](), [vmware-cloud-foundation]() ### AI overview The article presents VMware Pro Cloud Services as a way to deploy VMware Cloud Foundation faster and deliver a public-cloud experience on premises. It describes pre-packaged services for designing, deploying, configuring, integrating, and operationalizing a secure private cloud, using VMware reference architectures and practices developed through customer engagements. ### Source excerpt Public clouds have upped the ante when it comes to what we expect from private cloud solutions. Our smartphones and fast access to public cloud resources have conditioned us to expect instant access to what we need when we need it. Anything less feels antiquated and cumbersome, leaving your business users frustrated and disenchanted. To ... Continued The post Get to VMware Cloud Foundation Faster with VMware Pro Cloud Services appeared first on VMware Blogs. ## From Bottleneck to Breakthrough: Centralizing GitOps at Enterprise Scale with VCF 9.1.1 DevFeed: [From Bottleneck to Breakthrough: Centralizing GitOps at Enterprise Scale with VCF 9.1.1]() Original publisher: [Read original article]() Author: vmwareblogs Published: 2026-09-03T14:03:46Z Content type: article Language: en Sources: [VMware Blogs]() Topics: [GitOps](), [Platform Engineering](), [CI/CD](), [Automation](), [Cloud](), [Provisioning](), [Tooling]() Tags: [argo-cd](), [automation](), [cloud-infrastructure](), [cloud-native](), [continuous-delivery](), [deployment](), [gitops](), [home-page](), [platform](), [platform-engineering](), [provisioning](), [self-service](), [vcf-9-1](), [vcf-automation](), [vmware](), [vmware-cloud-foundation]() ### AI overview This VMware article announces VCF 9.1.1, which introduces a native GitOps service for VCF Automation Org users in Tech Preview. By integrating Argo CD, the update aims to centralize declarative application delivery, continuous delivery pipelines, and lifecycle management at enterprise scale, reducing manual work and operational friction for platform engineering teams. ### Source excerpt In today's fast-paced digital economy, where AI-driven innovation demands unprecedented agility, IT leaders are tasked with more than just provisioning infrastructure; they are expected to deliver a frictionless, self-service platform that accelerates software delivery. For platform engineers, cloud architects, and IT executives, the goal is to bridge the gap between robust infrastructure and modern application ... Continued The post From Bottleneck to Breakthrough: Centralizing GitOps at Enterprise Scale with VCF 9.1.1 appeared first on VMware Blogs. ## New AI and Kubernetes Private Cloud Operations Capabilities in VMware Cloud Foundation 9.1.1 DevFeed: [New AI and Kubernetes Private Cloud Operations Capabilities in VMware Cloud Foundation 9.1.1]() Original publisher: [Read original article]() Author: vmwareblogs Published: 2026-09-03T14:00:05Z Content type: release Language: en Sources: [VMware Blogs]() Topics: [vcf 9.1](), [vcf operations](), [Artificial Intelligence](), [Conversational AI](), [Kubernetes](), [private cloud](), [observability](), [Security]() Tags: [ai](), [cloud-infrastructure](), [conversational-ai](), [costoptimization](), [diagnostics](), [kubernetes](), [operations](), [private-cloud](), [release](), [security](), [vcf-9-1](), [vcf-management-services](), [vcf-operations](), [vcf-operations-for-logs](), [vcf-operations-for-networks](), [visibility](), [vks](), [vmware-cloud-foundation]() ### AI overview VMware announces new operations capabilities in VMware Cloud Foundation 9.1.1, including expanded visibility, an optional locally configured conversational AI assistant, full-stack Kubernetes observability, and enhanced security operations. ### Source excerpt We are excited to announce new operations capabilities with the release of VMware Cloud Foundation (VCF) 9.1.1. By expanding visibility capabilities, giving you the option to configure a conversational AI assistant to assist your daily workflows, and hardening security, VCF 9.1.1 helps IT teams resolve issues faster and scale their infrastructure. As private cloud infrastructure ... Continued The post New AI and Kubernetes Private Cloud Operations Capabilities in VMware Cloud Foundation 9.1.1 appeared first on VMware Blogs. ## Announcing General Availability of VMware Cloud Foundation 9.1.1 DevFeed: [Announcing General Availability of VMware Cloud Foundation 9.1.1]() Original publisher: [Read original article]() Author: vmwareblogs Published: 2026-09-03T13:47:18Z Content type: release Language: en Sources: [VMware Blogs]() Topics: [Cloud](), [Security](), [AI Platform](), [AI Models](), [MLOps]() Tags: [ai](), [ai-ml](), [ai-models](), [announce](), [apis](), [cloud](), [cloud-infrastructure](), [complexity](), [cost](), [cpu](), [data-privacy](), [evpn](), [governance](), [home-page](), [integrations](), [kubernetes](), [memory](), [nsx](), [private-ai-services](), [release](), [root-cause-analysis](), [security](), [troubleshooting](), [vcf-9-1](), [vcf-operations](), [vmware](), [vmware-cloud-foundation]() ### AI overview VMware announces the general availability of VMware Cloud Foundation 9.1.1. The release adds tougher security, vSAN Object Storage as a tech preview, multi-tenant AI model sharing with tenant-isolated access controls, and an AI Assistant for diagnostics, management-pack creation, and troubleshooting across infrastructure and Kubernetes clusters. ### Source excerpt Coming on the heels of a very successful VMware Explore in Vegas and the VMware Cloud Foundation (VCF) 9.1 launch in May, we're excited to announce the general availability of VCF 9.1.1. This release builds on VCF 9.1 with tougher security, vSAN Object Storage (tech preview, previously announced) and new capabilities designed to make your ... Continued The post Announcing General Availability of VMware Cloud Foundation 9.1.1 appeared first on VMware Blogs. ## 1Password signs OpenAI open letter calling for collective action on cyber defense DevFeed: [1Password signs OpenAI open letter calling for collective action on cyber defense]() Original publisher: [Read original article]() Author: info@1password.com (1Password) Published: 2026-08-28T00:00:00Z Content type: opinion Language: en Sources: [Blog on 1Password Blog]() Topics: [AI Bots](), [AI, ML & Data Engineering](), [cursor]() Tags: [agent](), [agentic](), [ai](), [audit-trail](), [aws](), [cloud-infrastructure](), [codex](), [collective](), [cursor](), [identity](), [openai](), [security](), [unified-access]() ### AI overview 1Password supports OpenAI's call for collective cyber defense, arguing that AI agents need least-privilege access, traceable identities, clear boundaries, and audit trails. ### Source excerpt As AI moves from answering questions to taking actions, the ecosystem around it will determine whether organizations can use it safely and with confidence. OpenAI's open letter on collective cyber defense warns that defenders have a limited window to strengthen security. It urges organizations to fix their highest-risk weaknesses, build least privilege and strong access controls, verify fixes, and make agentic identities traceable and accountable. The real work is building the ecosystem that lets them act safely and earn trust in production. That is why we continue working with OpenAI on trusted access for people and their agents. 1Password integrations with OpenAI, Codex, Anthropic Claude Code, Cursor, Kiro, Perplexity, and AWS Secrets Manager extend trusted access across development and cloud workflows. People should give agents access to key systems without exposing underlying credentials to the AI model. Cyber defense is a leadership responsibility. AI changes who and what can act inside the most sensitive systems, so identity security can no longer stop at human login. OpenAI is right to call for urgency, coordination, and fixes that organizations can verify without disrupting essential services. The standard is simple: every agent needs an identity, a boundary, and an audit trail." -Nancy Wang, Chief Technology Officer, 1Password Status quo security won't be enough Every security organization balances known weaknesses, technical debt, and limited time. The challenge for CISOs is deciding where to focus first and finding controls that reduce risk across the environment where AI is changing who and what can act inside an organization. Agents that work across browsers, repositories, terminals, cloud infrastructure, and production systems create a security challenge that begins before they take action. Standing access gives an agent more authority than a specific task requires and keeps it available after the task ends. If the agent is compromised or follows untru ## Neo Security: Securing Infrastructure in the Agentic Era DevFeed: [Neo Security: Securing Infrastructure in the Agentic Era]() Original publisher: [Read original article]() Author: Joe Duffy Published: 2026-08-28T00:00:00Z Content type: release Language: en Sources: [Pulumi]() Topics: [pulumi-neo](), [Security](), [cloud-infrastructure](), [Artificial Intelligence](), [Infrastructure as code](), [Static code analysis]() Tags: [agent](), [agentic](), [ai](), [aws](), [azure](), [cloud-infrastructure](), [infrastructure-as-code](), [kubernetes](), [product](), [pulumi](), [pulumi-neo](), [security]() ### AI overview Pulumi is opening a research preview of Neo Security, an agent that analyzes cloud infrastructure for exploitable flaws. It builds a threat model, maps attack paths, and produces an actionable security posture report, including for infrastructure provisioned across AWS, Azure, Google Cloud, and Kubernetes. ### Source excerpt Recently, AI systems have started turning up exploitable flaws in code that survived decades of human review. The frontier labs have released useful tools to help uncover many of these flaws through agent-led static code analysis. This is a huge leap ahead, but cloud infrastructure has many exploitable flaws that code analysis alone cannot find. These flaws are often as severe as the ones in code, or worse, and they await discovery by malicious agents on offense. We realized recently we can uniquely help here. At Pulumi, we have complete visibility into your entire cloud estate: infrastructure resources, their semantics, connections and dependencies between them, runtime logs and information, and more -- and have built an entire context graph out of them that is accessible to agents. Thanks to large language models, the cost of analyzing that full context graph is no longer prohibitive. As a result, today we're opening a research preview of Pulumi Neo Security. Neo Security is an agent that can find exploitable flaws in your cloud infrastructure. It starts with a threat model of your cloud estate, and then works systematically through every potential point of attack. The result is a security posture report that is immediately actionable thanks to Pulumi's infrastructure as code technology. Neo Security works on your existing infrastructure regardless of how it was provisioned, across any of our thousands of cloud providers including AWS, Azure, Google Cloud, and Kubernetes. We're releasing it in research preview to begin, so we can work closely with customers to run and address any findings. If you'd like to give it a try, contact us. How it finds attack paths Neo Security's aim is to provide a high-confidence, actionable security posture report. It gets there in three passes. The first builds a threat model, before it looks for anything. It works out what your crown jewels are, which resources are accessible to outside actors, which accounts hold production data, wh ## Vibe coded apps are the new shadow IT DevFeed: [Vibe coded apps are the new shadow IT]() Original publisher: [Read original article]() Author: Andy Gombar Published: 2026-08-13T00:00:00Z Content type: article Language: en Sources: [Webflow Blog]() Topics: [AI Agent](), [Security & compliance, Cloud security](), [AWS IAM](), [Amazon Web Services](), [cloud-infrastructure](), [App](), [Security]() Tags: [ai](), [ai-agent](), [aws](), [cloud-infrastructure](), [cloud-security](), [code](), [iam](), [policy](), [security]() ### AI overview Vibe-coded internal applications can become a new form of shadow IT when AI agents rapidly generate code, provision cloud infrastructure, and deploy resources without tickets or security review. The article describes the resulting risks, including exposed endpoints, overpermissioned IAM roles, and production blast radius, and calls for platform controls, review gates, and detection. ### Source excerpt Vibe-coded internal apps ship with IAM roles and no ticket filed. This baseline covers platform controls, review gates, and detection for what slips through. ## ScyllaDB Customer Experience Spotlight: Susie Solis DevFeed: [ScyllaDB Customer Experience Spotlight: Susie Solis]() Original publisher: [Read original article]() Author: Cynthia Dunlop Published: 2026-08-10T14:28:35Z Content type: article Language: en Sources: [ScyllaDB]() Topics: [Databases](), [distributed-systems](), [cloud-infrastructure](), [Kubernetes](), [Terraform](), [Latency](), [Linux]() Tags: [blog](), [cloud-infrastructure](), [community](), [customer](), [cx-profiles](), [database](), [distributed-systems](), [kubernetes](), [latency](), [linux](), [on-call](), [production](), [streaming](), [support](), [terraform]() ### AI overview Susie Solis, a ScyllaDB Technical Support Engineer, discusses her background in technical support, cloud infrastructure, and distributed systems, along with a Kubernetes and Terraform project built to reproduce environments and troubleshoot customer issues. She also describes ScyllaDB's ability to sustain high-throughput production workloads and low latency during major streaming events. ### Source excerpt Meet Susie Solis, a Technical Support Engineer on the Customer Experience team here at ScyllaDB. ## Your MVP doesn't need a Kubernetes cluster DevFeed: [Your MVP doesn't need a Kubernetes cluster]() Original publisher: [Read original article]() Author: Ryan Donovan Published: 2026-08-04T07:40:00Z Content type: article Language: en Sources: [Stack Overflow Blog]() Topics: [Kubernetes](), [cloud-infrastructure](), [Cloud](), [DevOps]() Tags: [cloud-infrastructure](), [devops](), [infrastructure](), [kubernetes](), [podcast](), [running-software](), [se-stackoverflow](), [se-tech]() ### AI overview The episode discusses why most startups should avoid beginning with Kubernetes and cloud-infrastructure management. Anurag Goel describes how frustrations with spinning up nodes led to building Render, considers applications allocating their own compute, and argues that DevOps jobs will continue to matter. ### Source excerpt Ryan welcomes Anurag Goel, CEO and co-founder of Render, to discuss why most startups shouldn't start by managing their Kubernetes and cloud infrastructure. ## How we secure Figma's internal systems with agents DevFeed: [How we secure Figma's internal systems with agents]() Original publisher: [Read original article]() Author: Matthew Sullivan; Brad Girardeau Published: 2026-07-29T20:44:00Z Content type: article Language: en Sources: [Figma Blog]() Topics: [AI Agent](), [Security](), [SIEM, Security](), [cloud-infrastructure](), [Amazon Bedrock](), [Cloud](), [Pull Request](), [Code](), [Vulnerabilities](), [Large Language Model]() Tags: [agents](), [ai-agent](), [bedrock](), [cloud](), [cloud-infrastructure](), [code](), [llm](), [pull-request](), [security](), [vulnerabilities]() ### AI overview Figma's security team built an AI agent that triages alerts, investigates incidents, queries security data, writes fixes, opens pull requests, and retains knowledge from prior investigations. The system reduced alert time to resolution by 71% and changed how on-call engineers handle security work. ### Source excerpt Our security team built an AI agent that triages alerts, conducts forensic investigations, queries our security data lake, writes code to fix issues--and remembers what it learns. Here's how we cut alert time-to-resolution by 71% and fundamentally changed how our on-call engineers work. ## Introducing 1Password Privileged Access: Zero standing privileges for every identity DevFeed: [Introducing 1Password Privileged Access: Zero standing privileges for every identity]() Original publisher: [Read original article]() Author: info@1password.com (Rom Carmel) Published: 2026-07-28T00:00:00Z Content type: release Language: en Sources: [Blog on 1Password Blog]() Topics: [Unified Access](), [IAM](), [AWS IAM](), [Security](), [Authorization](), [Cloud](), [cloud-infrastructure](), [Databases](), [Kubernetes](), [Artificial Intelligence]() Tags: [ai](), [ai-agents](), [aws](), [cloud](), [cloud-infrastructure](), [databases](), [iam](), [identity](), [kubernetes](), [news](), [security](), [unified-access]() ### AI overview 1Password Privileged Access introduces just-in-time access for human and agent identities across cloud and hybrid environments, databases, and Kubernetes. It aims to eliminate standing privileges by granting task-scoped access when needed and automatically removing it when work is complete. ### Source excerpt Here's a moment that comes up in nearly every compliance review: a security engineer pulls a list of IAM roles in the AWS environment. The list is long. Some roles were created for a migration project that closed two quarters ago, a few belong to contractors who haven't worked there in over a year, and others are attached to agentic identities without any way to see which human they were acting on behalf of. There's no ticket to clean them up, no alert when the access outlived its purpose, and no record of who approved it in the first place. That's standing access in practice; that long list of overprovisioned IAM roles is simply the product of how access has always been provisioned. Admins create it when the work starts, then rely on someone else to clean it up when it's done. But the cleanup rarely happens. The gap between the access granted and the access that's actually needed becomes the gap that shows up in audit findings, and that attackers learn to exploit. That problem has grown harder to manage as AI agents have joined human engineers in operating on production infrastructure. Agents don't request access through a ticket queue. They act continuously, respond to changing inputs, and can be steered in ways that static standing permissions were never designed to contain. Governing agents with the same legacy PAM tools built for human logins carries the risk forward instead of containing it. That's why we're introducing 1Password Privileged Access. It brings Apono's proven just-in-time access engine into the 1Password Unified Access platform, eliminating standing privileges for both human and agent identities across cloud and hybrid environments, databases, and Kubernetes. Access is created at the moment of the request, scoped to the task, and deprovisioned automatically when the work is done. Standing access became the default, and the cost kept growing Cloud infrastructure can change by the hour. New services get spun up, roles get reshuffled, and permission ## Turn And Face The Strange DevFeed: [Turn And Face The Strange]() Original publisher: [Read original article]() Published: 2026-07-24T00:00:00Z Content type: article Language: en Sources: [The Fly Blog]() Topics: [AI Chat]() Tags: [agents](), [ai](), [cdn](), [close-to-users](), [cloud](), [cloud-infrastructure](), [coding](), [deploy-app-servers](), [docker](), [elixir](), [fly](), [fly-io](), [heroku-alternative](), [heroku-competitor](), [hosting](), [i](), [networking](), [postgresql-clusters](), [servers](), [software-development]() ### AI overview Fly.io says it is raising more money, launching a new iteration of Sprites--computers for agents--and refocusing the company around that product as AI reshapes software development. ### Source excerpt We're Fly.io, a public cloud platform that is both our favorite way to put an app on the Internet and our favorite way to safely let a frontier agent coding harness cook. This is a post about our company, the future, and Sprites, which are computers for agents that you can check out right now. This is a complicated post. So I need you to promise me something: if you read past this introduction, you'll read the whole rest of the way through. It's an honor thing. A couple months back, Theo Browne ran a video rating the "best place to host a new application in 2026". Theo tends to say nice things about us. He did this time too. But then he concluded by saying that of all the providers he pays attention to, we were the one he was least confident would be around by the end of the year. Well, fuck. Theo startled us, because we're in the middle of a run of strong quarters that have included the best financial months in the company's history. But that take has been rattling around in my brain. It whacked me right on a raw nerve, about what we're doing and where we're going as a company. Honestly, I should've seen this coming. Fly.io has been motoring along this year, but I've coasted a bit, letting the company smolder in an unresolved identity crisis. I'm going to overshare some more in a second, but I won't leave you hanging. So: we've raised a bunch more money. We're launching a new iteration of Sprites, and focusing the company on them and the problem they solve. And I'm tagging in Scott Johnston as CEO. Product-Market Fit I started Fly.io with two clear principles that probably don't matter anymore. The first is that Internet applications work best when they're fast, and that happens when they're deployed close to users. I learned this over many years of working at Ars Technica, and started Fly.io in part to scratch an itch. It was our mantra over the first several years of the company. The second is that cloud infrastructure is too complicated. Developers need platform ## Securing Infrastructure at Scale: Introducing Pinterest's Resource Provisioner Pipeline (RPP) DevFeed: [Securing Infrastructure at Scale: Introducing Pinterest's Resource Provisioner Pipeline (RPP)]() Original publisher: [Read original article]() Author: Pinterest Engineering Published: 2026-07-22T16:01:02Z Content type: article Language: en Sources: [Pinterest Engineering Blog - Medium]() Topics: [Infrastructure as code](), [Terraform](), [CI/CD](), [GitHub Actions](), [Amazon Web Services](), [GitHub](), [AWS IAM](), [Security](), [Provisioning](), [Amazon S3](), [Kubernetes](), [networking]() Tags: [aws](), [ci-cd](), [cloud-infrastructure](), [engineering](), [github-actions](), [iam](), [infrastructure](), [infrastructure-as-code](), [kubernetes](), [networking](), [pinterest](), [pull-request](), [s3](), [security](), [terraform]() ### AI overview Pinterest's Resource Provisioner Pipeline (RPP) is a proprietary Terraform execution engine for securely managing infrastructure changes across a distributed, multi-repository environment. The article describes its centralized GitHub Actions workflow, compliance controls, role chaining, and management of AWS infrastructure including IAM, networking, S3, compute, and Kubernetes resources. ### Source excerpt Ammar Ekbote | Senior Software Engineer Chan Kim | Senior Software Engineer Managing Infrastructure as Code (IaC) across a massive organization comes with a unique set of security and logistical challenges, particularly when operating within a distributed, multi-repository architecture. At Pinterest, we designed the Resource Provisioner Pipeline (RPP), our specialized, proprietary Terraform execution engine to safely manage both critical and non-critical infrastructure changes. In this post, we will look under the hood of the first iteration of the RPP system. We will explore how it established compliance and provides robust security guardrails for our global AWS operations by utilizing dual controls, centralized GitHub Actions execution, and a secure role-chaining mechanism. If your engineering team is looking to add strict guardrails to a GitHub workflow-driven Terraform setup, our architecture might serve as a helpful blueprint. What is RPP? RPP delivers a secure, standardized CI/CD workflow for deploying and managing Pinterest's foundational AWS infrastructure. Today, the system manages hundreds of Terraform workspaces that collectively govern tens of thousands of resources. This includes: Security Policies: Managing critical IAM roles and access policies. Networking Infrastructure: Configuring VPCs, Security Groups, Load Balancers, and DNS. Storage & Compute: Provisioning S3 buckets (including access controls) and Kubernetes clusters. The RPP GitHub WorkflowThe Multi-Repo Challenge Pinterest's Terraform code is currently distributed across multiple repositories, each owned and maintained by a completely different team. While we have an ongoing initiative to consolidate these into a unified mono-repository, RPP acts as a vital bridge that securely supports this legacy multi-repo structure. Centralized Execution Model To maintain absolute control over infrastructure states, RPP enforces a centralized execution model for all code changes: Workflow Invocation: The ## This Shit is Hard: Getting software to run on robots (and then getting the robots to work) DevFeed: [This Shit is Hard: Getting software to run on robots (and then getting the robots to work)]() Original publisher: [Read original article]() Published: 2026-07-01T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Robotics](), [Software](), [Embedded Software Dev](), [cloud-infrastructure](), [CI/CD](), [Security]() Tags: [asylon-robotics](), [autonomous](), [chainguard-containers](), [chainguard-customer](), [ci-cd](), [cloud-infrastructure](), [critical-infrastructure](), [drone](), [embedded](), [engineering](), [firewalls](), [hardware](), [robot-dogs](), [robot-drones](), [robotics](), [robots](), [software](), [this-shit-is-hard]() ### AI overview Asylon Robotics Chief Engineer Eric Timmons explains the engineering challenges of deploying software on robotic dogs and drones, where embedded systems, hardware dependencies, CI/CD, cloud infrastructure, and real-world operating conditions interact. ### Source excerpt Asylon Robotics Chief Engineer Eric Timmons shares lessons from building autonomous robots, where software, hardware, and real-world constraints collide. ## What Is Multi-Cloud? DevFeed: [What Is Multi-Cloud?]() Original publisher: [Read original article]() Author: Ryan Kollist Published: 2026-06-23T16:45:27Z Content type: tutorial Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [Cloud Architecture](), [cloud-infrastructure](), [Cilium](), [networking](), [Security]() Tags: [architecture](), [cilium](), [cloud](), [cloud-architecture](), [cloud-infrastructure](), [infrastructure](), [multi-cloud](), [networking](), [security](), [what-is-multicloud](), [what-is-multicloud-architecture](), [what-is-multicloud-networking](), [what-is-multicloud-security](), [what-is-the-difference-between-multicloud-and-hybrid-cloud]() ### AI overview This article explains multi-cloud architecture, its importance, and how Isovalent Cilium supports a consistent networking and security operational model across different cloud infrastructures. ### Source excerpt Learn what makes a multi-cloud architecture, why it's important and how Isovalent Cilium enables a consistent networking and security operational model across any cloud infrastructure. ## How Spyne simplified their CDC pipeline with ClickPipes and ClickHouse Cloud DevFeed: [How Spyne simplified their CDC pipeline with ClickPipes and ClickHouse Cloud]() Original publisher: [Read original article]() Author: ClickHouse Published: 2026-06-22T11:37:29Z Content type: article Language: en Sources: [ClickHouse Blog]() Topics: [clickhouse](), [schema-evolution](), [Kafka](), [MongoDB](), [MySQL](), [Streaming](), [developer velocity](), [Serverless](), [Cloud](), [real-time](), [DevOps]() Tags: [clickhouse](), [cloud-infrastructure](), [data](), [developer-velocity](), [devops](), [kafka](), [mysql](), [open-source](), [real-time](), [schema-evolution](), [serverless](), [streaming]() ### AI overview Spyne migrated its change data capture pipeline from a self-managed Debezium and Kafka stack to serverless ClickPipes and ClickHouse Cloud. The change reduced table onboarding time from more than 1.5 hours to minutes and automated schema evolution, improving data consistency and developer velocity. ### Source excerpt Spyne cut table onboarding from 1.5+ hours to minutes and eliminated schema drift by migrating their CDC pipeline from a self-managed Debezium/Kafka stack to ClickPipes and ClickHouse Cloud. ## Access OpenAI models and Codex through your Oracle cloud commitment DevFeed: [Access OpenAI models and Codex through your Oracle cloud commitment]() Original publisher: [Read original article]() Published: 2026-06-10T20:00:00Z Content type: news Language: en Sources: [OpenAI News]() Topics: [OpenAI](), [codex](), [Cloud](), [Artificial Intelligence](), [AI Strategy](), [AI Development](), [API]() Tags: [ai](), [ai-adoption](), [api](), [cloud](), [cloud-infrastructure](), [codex](), [company](), [enterprise](), [openai](), [partnership](), [production](), [reduce](), [security]() ### AI overview OpenAI and Oracle are expanding access to OpenAI models and Codex through Oracle Cloud Infrastructure and Oracle Marketplace. Eligible Oracle customers can use existing Oracle Universal Credits and procurement processes to access these offerings, initially in the United States, for building AI applications, analyzing information, automating workflows, and supporting enterprise adoption. ### Source excerpt Access OpenAI models and Codex through Oracle Cloud, using existing commitments to build and deploy AI with enterprise security and governance. ## Future of IaC: Continuous Governance Through a Control Plane DevFeed: [Future of IaC: Continuous Governance Through a Control Plane]() Original publisher: [Read original article]() Author: Mrinalini Sugosh Published: 2026-06-09T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [Platform Engineering](), [Infrastructure as code](), [cloud-infrastructure](), [Provisioning](), [Terraform](), [GitOps](), [CI/CD]() Tags: [ci-cd](), [cloud](), [cloud-infrastructure](), [configuration](), [gitops](), [iac](), [infrastructure](), [platform-engineering](), [policy](), [provisioning](), [self-service](), [terraform]() ### AI overview This article explains why platform engineering teams are moving beyond point-in-time infrastructure provisioning toward continuous governance through infrastructure control planes. It focuses on reducing drift, enforcing policy, coordinating configuration and operational changes, and enabling safer self-service workflows. ### Source excerpt Learn how platform engineering teams use infrastructure control planes to reduce drift, enforce governance, and scale self-service safely. | Blog ## Why Choose Pulumi Over Terraform? DevFeed: [Why Choose Pulumi Over Terraform?]() Original publisher: [Read original article]() Author: Pablo Seibelt Published: 2026-06-02T00:00:00Z Content type: comparison Language: en Sources: [Pulumi]() Topics: [Infrastructure as code](), [Terraform](), [cloud-infrastructure](), [Programming](), [Software Engineering](), [Refactoring](), [Tooling](), [migration]() Tags: [cloud-infrastructure](), [general](), [infrastructure-as-code](), [migration](), [platform-engineering](), [programming](), [programming-languages](), [pulumi](), [refactoring](), [software-engineering](), [terraform](), [tooling]() ### AI overview This comparison explains why teams may choose Pulumi over Terraform for infrastructure as code. It highlights Pulumi's use of general-purpose programming languages, package managers, IDEs, testing, refactoring workflows, encrypted secrets, reusable components, and safeguards for destructive changes, while noting that provider bugs, drift, eventual consistency, unknown values, and poor abstractions still require engineering discipline. ### Source excerpt Terraform is a proven infrastructure as code tool with a large provider and module ecosystem. Many teams choose Pulumi when they want to keep that infrastructure as code model, but write and maintain infrastructure with general-purpose programming languages, familiar package managers, IDEs, testing, and software engineering patterns, while still understanding the refactoring tradeoffs in Terraform's own module refactoring guidance. Why choose Pulumi over Terraform? Pulumi's language SDKs let teams define cloud infrastructure in TypeScript, JavaScript, Python, Go, .NET, or Java -- with YAML and HCL also supported as authoring languages -- while adding first-class workflows for refactoring with Pulumi aliases, secrets, protect, retainOnDelete, deleteBeforeReplace, replaceOnChanges, provider resources, Pulumi stacks, testing, and incremental migration with pulumi import. Pulumi does not remove every hard problem in cloud infrastructure, but it gives teams stronger tools for many day-to-day pain points. Executive summary Pulumi is often a better fit when infrastructure code needs to behave like application code: reviewed, tested, packaged, refactored, and shared across teams. The biggest advantages show up when teams need safer refactors, encrypted secret values, reusable components, clearer provider resources, and guardrails around destructive changes. The tradeoff is important: Pulumi is still an infrastructure as code engine. Provider bugs, cloud API eventual consistency, drift, preview-time unknowns, and poorly designed abstractions still require engineering discipline. The advantage is not magic. The advantage is a stronger programming model and a more familiar developer workflow. Need Terraform pattern Pulumi advantage What still needs care Languages and tooling HCL plus Terraform-specific functions and expressions Pulumi supports general-purpose languages, YAML, and now HCL natively, with the normal IDE, test, and package workflows for each Teams still need code re [Next page]()