Close ×

Alex Schoof Quotes

Total quotes (1)

Alex Schoof

Alex Schoof

Birthname

Total quotes (1)

Other than the excellent GenerateRandom API call (which you should check out for seeding your PRNGs), KMS is composed of a set of API operations for creating, managing, and using a relatively small set of encryption keys, called Customer Master Keys (here, "master keys"). There are a bunch of operations for managing grants and policy around who can use which keys for what operations, but the fundamental operations in KMS are CreateKey, Encrypt, and Decrypt. CreateKey will generate a key in the KMS service that will never leave the KMS service. Once you create a key in KMS, you can disable it, you can set permissions on who can use it, you can alias it, but you cannot export it. In order to use the keys for cryptography, you use the Encrypt and Decrypt API calls. This is the core security value proposition in KMS: no one can run off with the keys.

— Alex Schoof, Using AWS KMS to manage secrets in your Infrastructure

Ops Secrets Security

Share

Related quotes to Alex Schoof tagged Ops, Secrets, Security

Videos start out blurry but then suddenly sharpen up — that is Netflix switching servers till it connects to the one that will give you the highest quality of video.

— Mayukh Nair, How Netflix works: the (hugely simplified) complex stuff that happens every time you hit Play

Ops CDN Performance Engineering

Share

good news: it's sysadmin day.
bad news, you're still a sysadmin.

— saddest server, via twitter.com

Share

Thousands of lines of logs fly by like a Hollywood hacking montage. When the process finishes, it’s not always clear if it succeeded or if you need to scroll up to the cryptic error message you’ll need to google.

— Aaron Suggs, The value of reliable developer tooling

Ops Kickstarter Engineering

Share

Docker allows you to package an application with all of its dependencies into a standardized unit for software development.

— Docker, What is Docker

Share

The choice to use a NoSQL database is often based on hype, or a wrong assumption that relational databases cannot perform as well as a NoSQL database. Operational costs, as well as other stability and maturity concerns, are often overlooked by engineers when it comes to selecting a database.

— Yoav Abrahami, Scaling to 100M: MySQL is a Better NoSQL | Wix Engineering

MYSQL Ops NoSQL Scalability

Share

This Dockerfile is used by the build pipeline to create a new Docker image upon pushing code to the repository. The built image will then be used to start a new service on an ECS cluster.

— Chris Barclay, Set up a build pipeline with Jenkins and Amazon ECS

AWS Ops Docker Jenkins

Share

At Simon, we use Jenkins for continuous integration, but we also use it for much more than that. It functions as an asynchronous job queue, a workflow manager for our Elastic MapReduce job flows, a context for executing one-off long running scripts, a vehicle for continuous deployment, and more.

— Jason Davis, Can We Use Jenkins for That?

Share

For every second of every day, Unsplash serves 360 high-res images and 120 API and web requests. More photos are viewed every week than over the entire first year of Unsplash.

— Luke Chesser, What does Unsplash cost?

Share

The end result is a chat-based interface for creating an isolated deployment of GitHub for any pull request. Once a pull request passed all required CI jobs, a user can deploy their pull request to review lab.

— Jesse Newland, Kubernetes at GitHub

Ops Continuous Delivery Development ChatBots

Share

The recommendation for speeding up a website is almost always to add cache and more cache. And after that add a little more cache just in case.

— High Scalability, A Bunch Of Great Strategies For Using Memcached And MySQL Better Together

MYSQL Memcache Ops Performance Cache

Share

It (edited: "Anisble") uses no agents and no additional custom security infrastructure, so it's easy to deploy - and most importantly, it uses a very simple language (YAML, in the form of Ansible Playbooks) that allow you to describe your automation jobs in a way that approaches plain English.

— Red Hat, How Ansible Works

Share

Our team knew the dangers and distractions of premature optimization, and figured the “easiest” way to shard was to avoid it for as long as possible.

— Christine Spang, Growing up with MySQL

MYSQL Scalability Ops Nylas

Share

A hot-standby is a PostgreSQL replica that allows you to run read-only SQL queries, contrary to a regular standby that does not allow any SQL queries to be executed.

— Yorick Peterse, Scaling the GitLab database

Ops Data Engineering Scale Gitlab

Share

A key mechanism to achieve this is to automate the management as much as possible, removing error prone, manual operations.

— Werner Vogels, 10 Lessons from 10 Years of Amazon Web Services

AWS Automation Ops

Share

We didn’t yet know the full extent of our sync system issues, but one thing was crystal clear: we needed to scale. A lot.

— Christine Spang, Growing up with MySQL

Nylas MYSQL Ops

Share

It groups containers that make up an application into logical units for easy management and discovery. Kubernetes builds upon 15 years of experience of running production workloads at Google, combined with best-of-breed ideas and practices from the community.

— Kubernetes, Production-Grade Container Orchestration

Ops Containers Google Scale Google

Share

Set up your own IPsec VPN server on Docker, with support for both IPsec/L2TP and IPsec/XAuth ("Cisco IPsec").

Based on Debian Jessie with Libreswan (IPsec VPN software) and xl2tpd (L2TP daemon).

— hwdsl2, IPsec VPN Server on Docker

Share

CredStash is a very simple, easy to use credential management and distribution system that uses AWS Key Management Service (KMS) for key wrapping and master-key storage, and DynamoDB for credential storage and sharing.

— fugue, credstash Readme

Ops AWS Secrets

Share

Kafka provides the messaging backbone for building a new generation of distributed applications capable of handling billions of events and millions of transactions

— Heroku, What is Kafka

Heroku Ops SASS

Share

A developer can deploy their applications on AWS without Elastic Beanstalk but that will mean spending time on selecting and piecing together services from the wide array of choices within AWS eco-system.

— Colin Toh, AWS Elastic Beanstalk Survival Guide: Introduction

Ops AWS Deployment

Share

You’re only as sick as your secrets. If it is a secret—anything that makes you sort of shame-based—if you can claim it, it has a lot of less power over you.

— Carrie Fisher, Palm Beach Illustrated

Secrets empowerment Shame Self-awareness

Share

Okay is just a word I use so I won’t have to talk about what’s inside. Okay is a word that means I am going to keep my secrets.

— Benjamin Alire Sáenz, Last Night I Sang to the Monster

Share

And above all, watch with glittering eyes the whole world around you because the greatest secrets are always hidden in the most unlikely places. Those who don’t believe in magic will never find it.

— Roald Dahl, The Minpins

unexpected pay attention Awareness Appreciation Secrets

Share

She had always kept things to herself. That was one sure truth.

— Carson McCullers, The Heart is a Lonely Hunter

Unsaid Things Fear Keeping Things To Yourself Secrets Elusive

Share

Trending Shows