Infrastructure

Does technology actually matter? And how can we apply technology to drive business value?

For years, we’ve been told that the performance of software delivery teams doesn’t matter—that it can’t provide a competitive advantage to our companies. Through four years of groundbreaking research, Dr. Nicole Forsgren, Jez Humble, and Gene Kim set out to find a way to measure software delivery performance—and what drives it—using rigorous statistical methods. This book presents both the findings and the science behind that research.

Readers will discover how to measure the performance of their teams, and what capabilities they should invest in to drive higher performance.

Becoming a Kubernetes administrator is a big accomplishment—and passing the Certified Kubernetes Administrator (CKA) exam can be a big boost to your career! Learn the hands on skills you need to ace the exam with clear teaching and hands-on exercises that match the unique CKA test environment.

In Acing the Certified Kubernetes Administrator Exam you’ll learn how to:

• Administer an application running on Kubernetes
• Troubleshoot errors inside a Kubernetes cluster
• Authenticate users and machines to the Kubernetes API
• Create persistent storage in Kubernetes
• Add additional functionality to an existing Kubernetes cluster

Acing the Certified Kubernetes Administrator Exam is your fast-track to becoming a Certified Kubernetes Administrator! Your expert exam tutor is Chad Crowell, whose courses have helped thousands of developers to understand Kubernetes and earn the coveted CKA certification. If you’re familiar with Kubernetes, this book will ensure you’re ready to pass in just one month of study. If you’re brand new, this is the perfect primer to get started on your Kubernetes journey.

Go hands-on with all the exam objectives, including deploying containerized applications to Kubernetes, accessing an application from an ingress resource, and backup and restore. Plus, essential exam tips and exercises help you work out your mental muscle memory.

ActiveMQ in Action is all you'll need to master ActiveMQ. It starts from the anatomy of a JMS message and moves quickly through connectors, message persistence, authentication, and authorization. By following a running example (a stock portfolio app), you'll pick up the best practices distilled by the authors from their long and deep involvement with this technology.

Master essential best practices for deploying and managing applications on Amazon Web Services. This revised bestseller is packed with techniques for building highly available and scalable architectures and automating deployment with Infrastructure as Code.

• Leverage globally distributed data centers to launch virtual machines with EC2
• Store and archive large volumes of data with EBS, S3, and EFS
• Persist and query data with highly available and scalable database systems with RDS and DynamoDB
• Enhance performance with caching data in-memory with ElastiCache and MemoryDB
• Use Infrastructure as Code to automate your cloud infrastructure
• Secure workloads running in the cloud with VPC and IAM
• Build fault-tolerant web applications with ALB and SQS
• Automate common sysadmin tasks with Lambda, CLI, and SDK
• Build cloud-native applications based on containers with AppRunner, ECS, Fargate

Thousands of developers have chosen Amazon Web Services in Action: An in-depth guide to AWS to help them succeed with the AWS cloud. Readers love this all-practical handbook for its complete introduction to computing, storage, and networking, along with best practices for all core AWS services. This revised third edition features new chapters on containerization, along with a variety of AWS innovations. You’ll also learn how automating your infrastructure with IAC is a game changer for your cloud deployment, delivering a massive boost to efficiency and quality.

Among the many configuration management tools available, Ansible has some distinct advantages: It's minimal in nature. You don't need to install agents on your nodes. And there's an easy learning curve. With this updated third edition, you'll quickly learn how to be productive with Ansible whether you're a developer deploying code or a system administrator looking for a better automation solution.

Authors Bas Meijer, Lorin Hochstein, and Rene Moser show you how to write playbooks (Ansible's configuration management scripts), manage remote servers, and explore the tool's real power: built-in declarative modules. You'll learn how Ansible has all the functionality you need--and the simplicity you desire.

• Explore Ansible configuration management and deployment
• Manage Linux, Windows, and network devices
• Learn how to apply Ansible best practices
• Understand how to use the new collections format
• Create custom modules and plug-ins
• Generate reusable Ansible content for open source middleware
• Build container images, images for cloud instances, and cloud infrastructure
• Automate CI/CD development environments
• Learn how to use Ansible Automation Platform for DevOps

Deliver lightning fast and reliable messaging for your distributed applications with the flexible and resilient Apache Pulsar platform.

In Apache Pulsar in Action you will learn how to:

• Publish from Apache Pulsar into third-party data repositories and platforms
• Design and develop Apache Pulsar functions
• Perform interactive SQL queries against data stored in Apache Pulsar

Apache Pulsar in Action is a comprehensive and practical guide to building high-traffic applications with Pulsar. You’ll learn to use this mature and battle-tested platform to deliver extreme levels of speed and durability to your messaging. Apache Pulsar committer David Kjerrumgaard teaches you to apply Pulsar’s seamless scalability through hands-on case studies, including IOT analytics applications and a microservices app based on Pulsar functions.

Infrastructure as code (IaC) and Terraform have become essential tools for managing cloud infrastructure and automating deployment processes. Mastering Terraform on AWS presents a step-by-step approach on how to master these tools and build a secure and scalable AWS infrastructure.

The book starts with an introduction to patterns and anti-patterns of IaC and Terraform, explaining the common mistakes and pitfalls you must avoid. You’ll then learn about the importance of planning and designing infrastructure projects in AWS and making informed decisions for projects in AWS Terraform. You’ll find out how to implement Terraform in your projects and deploy serverless projects. Next, you’ll be able to deploy containers in AWS with Terraform, exploring the best practices for Terraform IaC projects. You’ll understand how you can leverage Terraform for enterprises, build Git workflows for IaC and Terraform projects, and automate deployment of Terraform projects. The last set of chapters will teach you how to govern AWS with Terraform and build a secure infrastructure. Finally, you’ll discover how to achieve a perfect AWS infrastructure with Terraform.

By the end of this book, you’ll have gained a comprehensive understanding of the various aspects of Terraform and IaC, along with the knowledge required to build, manage, and deploy complex infrastructures on AWS.

What you will learn

• Get to grips with Terraform frameworks and best practices
• Use Terraform providers and modules
• Develop your first AWS resource in Terraform
• Build an infrastructure project with Terraform
• Govern an infrastructure project in Terraform
• Deploy Terraform projects to AWS with CI/CD

Who this book is for

This book is for cloud and DevOps engineers, developers, and architects responsible for writing or designing infrastructure as code to deploy resources in AWS. You are expected to have a basic understanding of AWS and should have experience deploying resources through the user interface (UI).

GitOps follows the practices of infrastructure as code (IaC), allowing developers to use their day-to-day tools and practices such as source control and pull requests to manage apps. With this book, you'll understand how to apply GitOps bootstrap clusters in a repeatable manner, build CD pipelines for cloud-native apps running on Kubernetes, and minimize the failure of deployments.

You'll start by installing Argo CD in a cluster, setting up user access using single sign-on, performing declarative configuration changes, and enabling observability and disaster recovery. Once you have a production-ready setup of Argo CD, you'll explore how CD pipelines can be built using the pull method, how that increases security, and how the reconciliation process occurs when multi-cluster scenarios are involved. Next, you'll go through the common troubleshooting scenarios, from installation to day-to-day operations, and learn how performance can be improved. Later, you'll explore the tools that can be used to parse the YAML you write for deploying apps. You can then check if it is valid for new versions of Kubernetes, verify if it has any security or compliance misconfigurations, and that it follows the best practices for cloud-native apps running on Kubernetes.

By the end of this book, you'll be able to build a real-world CD pipeline using Argo CD.

What you will learn

• Understand GitOps principles and how they relate to IaC
• Discover how Argo CD lays the foundation for reconciling Git state with the cluster state
• Run Argo CD in production with an emphasis on reliability and troubleshooting
• Bootstrap Kubernetes clusters with essential utilities following the GitOps approach
• Set up a CD pipeline and minimize the failure of deployments
• Explore ways to verify and validate the YAML you put together when working with Kubernetes
• Understand the democratization of GitOps and how the GitOps engine will enable its further adoption

Who this book is for

If you're a software developer, DevOps engineer, or SRE who is responsible for building CD pipelines for projects running on Kubernetes and wants to advance in your career, this book is for you. Basic knowledge of Kubernetes, Helm, or Kustomize and CD pipelines will help you to get the most out of this book.

Developers and release engineers understand the high stakes involved in building, packaging, and deploying code correctly. Ensuring that your code is functionally correct, fast, and secure is a time-consuming and complex task. Code implementation, development, and deployment can be conducted efficiently using GitLab CI/CD pipelines.

Automating DevOps with GitLab CI/CD Pipelines begins with the basics of Git and GitLab, showing how to commit and review code. You’ll learn to set up GitLab Runners for executing and autoscaling CI/CD pipelines and creating and configuring pipelines for many software development lifecycle steps. You'll also discover where to find pipeline results in GitLab, and how to interpret those results. Through the course of the book, you’ll become well-equipped with deploying code to different environments, advancing CI/CD pipeline features such as connecting GitLab to a Kubernetes cluster and using GitLab with Terraform, triggering pipelines and improving pipeline performance and using best practices and troubleshooting tips for uncooperative pipelines. In-text examples, use cases, and self-assessments will reinforce the important CI/CD, GitLab, and Git concepts, and help you prepare for interviews and certification exams related to GitLab.

By the end of this book, you'll be able to use GitLab to build CI/CD pipelines that automate all the DevOps steps needed to build and deploy high-quality, secure code.

** What you will learn**

• Gain insights into the essentials of Git, GitLab, and DevOps
• Understand how to create, view, and run GitLab CI/CD pipelines
• Explore how to verify, secure, and deploy code with GitLab CI/CD pipelines
• Configure and use GitLab Runners to execute CI/CD pipelines
• Explore advanced GitLab CI/CD pipeline features like DAGs and conditional logic
• Follow best practices and troubleshooting methods of GitLab CI/CD pipelines
• Implement end-to-end software development lifecycle workflows using examples

Who this book is for

This book is for DevOps/DevSecOps engineers, application developers, release engineers, quality assurance engineers, security engineers, SREs, and sysadmins looking to implement fast, secure and automated software development lifecycle tasks using continuous integration and continuous delivery (CI/CD) pipelines in GitLab. Basic knowledge of major stages of the software development life cycle and DevOps processes will be helpful.

The newly revised second edition of the AWS Certified Advanced Networking Study Guide: Specialty (ANS-C01) Exam delivers an expert review of Amazon Web Services Networking fundamentals as they relate to the ANS-C01 exam. You’ll find detailed explanations of critical exam topics combined with real-world scenarios that will help you build the robust knowledge base you need for the test—and to succeed in the field as an AWS Certified Networking specialist.

Learn about the design, implementation and deployment of AWS cloud-based Networking solutions, core services implementation, AWS service architecture design and maintenance (including architectural best practices), monitoring, Hybrid networks, security, compliance, governance, and network automation. The book also offers one year of free access to Sybex’s online interactive learning environment and expert study tools, featuring flashcards, a glossary of useful terms, chapter tests, practice exams, and a test bank to help you keep track of your progress and measure your exam readiness.

The coveted AWS Advanced Networking credential proves your skills with Amazon Web Services and hybrid IT network architectures at scale. It assesses your ability to apply deep technical knowledge to the design and implementation of AWS Networking services. This book provides you with comprehensive review and practice opportunities so you can succeed on the challenging ANS-C01 exam the first time around. It also offers:

• Coverage of all relevant exam domains and competencies
• Explanations of how to apply the AWS skills discussed within to the real world in the context of an AWS Certified Networking-related career
• Complimentary access to the practical Sybex online learning environment, complete with practice exams, flashcards, a glossary, and test bank

AWS certification proves to potential employers that you have the knowledge and practical skills you need to deliver forward-looking, resilient, cloud-based solutions. The AWS Certified Advanced Networking Study Guide: Specialty (ANS-C01) Exam, 2nd Edition, is your ticket to the next big step in your career.

Amazon Web Services is the largest cloud computing service provider in the world. Its foundational certification, AWS Certified Cloud Practitioner (CLF-C01), is the first step to fast-tracking your career in cloud computing. This certification will add value even to those in non-IT roles, including professionals from sales, legal, and finance who may be working with cloud computing or AWS projects. If you are a seasoned IT professional, this certification will make it easier for you to prepare for more technical certifications to progress up the AWS ladder and improve your career prospects.

The book is divided into four parts. The first part focuses on the fundamentals of cloud computing and the AWS global infrastructure. The second part examines key AWS technology services, including compute, network, storage, and database services. The third part covers AWS security, the shared responsibility model, and several security tools. In the final part, you'll study the fundamentals of cloud economics and AWS pricing models and billing practices.

Complete with exercises that highlight best practices for designing solutions, detailed use cases for each of the AWS services, quizzes, and two complete practice tests, this CLF-C01 exam study guide will help you gain the knowledge and hands-on experience necessary to ace the AWS Certified Cloud Practitioner exam.

What you will learn

• Create an AWS account to access AWS cloud services in a secure and isolated environment
• Understand identity and access management (IAM), encryption, and multifactor authentication (MFA) protection
• Configure multifactor authentication for your IAM accounts
• Configure AWS services such as EC2, ECS, Lambda, VPCs, and Route53
• Explore various storage and database services such as S3, EBS, and Amazon RDS
• Study the fundamentals of modern application design to shift from a monolithic to microservices architecture
• Design highly available solutions with decoupling ingrained in your design architecture

Who this book is for

If you're looking to advance your career and gain expertise in cloud computing, with particular focus on the AWS platform, this book is for you. This guide will help you ace the AWS Certified Cloud Practitioner Certification exam, enabling you to embark on a rewarding career in cloud computing. No previous IT experience is essential to get started with this book, since it covers core IT fundamentals from the ground up.

Trust the best-selling Cert Guide series from Pearson IT Certification to help you learn, prepare, and practice for exam success. They are built with the objective of providing assessment, review, and practice to help ensure you are fully prepared for your certification exam.

AWS Certified Solutions Architect - Associate (SAA-C03) Cert Guide presents you with an organized test preparation routine using proven series elements and techniques. “Do I Know This Already?” quizzes open each chapter and enable you to decide how much time you need to spend on each section. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly.

• Master AWS Certified Solutions Architect - Associate (SAA-C03) exam topics
• Assess your knowledge with chapter-opening quizzes
• Review key concepts with exam preparation tasks
• Practice with realistic exam questions in the practice test software

AWS Certified Solutions Architect - Associate (SAA-C03) Cert Guide from Pearson IT Certification prepares you to succeed on the exam by directly addressing the exam’s official objectives as stated by Amazon. Leading Cloud expert Mark Wilkins shares preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills.

This complete study package includes

• A test-preparation routine proven to help you pass the exams
• Do I Know This Already? quizzes, which enable you to decide how much time you need to spend on each section
• Chapter-ending Key Topic tables, which help you drill on key concepts you must know thoroughly
• The powerful Pearson Test Prep Practice Test software, complete with hundreds of well-reviewed, exam-realistic questions, customization options, and detailed performance reports
• An online, interactive Flash Cards application to help you drill on Key Terms by chapter
• A final preparation chapter, which guides you through tools and resources to help you craft your review and test-taking strategies
• Study plan suggestions and templates to help you organize and optimize your study time

Well regarded for its level of detail, study plans, assessment features, and challenging review questions and exercises, this study guide helps you master all the topics on the AWS Certified Solutions Architect - Associate (SAA-C03) exam, including

• Secure Architectures: Secure access to AWS resources, secure workloads and applications, data security controls
• Resilient Architectures: Scalable and loosely coupled architectures, highly available and fault-tolerant architectures
• High-Performing Architectures: High-performing and scalable storage solutions; high-performing and elastic compute solutions; high-performing database solutions, scalable network architecture, data ingestion, and transformations solutions
• Cost-Optimized Architectures: Cost-optimized storage solutions, compute solutions, and database solutions; cost-effective network architectures

Also available from Pearson IT Certification for AWS Certified Solutions Architect - Associate (SAA-C03) study is the AWS Certified Solutions Architect - Associate (SAA-C03) Cert Guide Premium Edition eBook and Practice Test. This digital-only certification preparation product combines an eBook with enhanced Pearson Test Prep Practice Tests.

The AWS Certified Solutions Architect Study Guide: Associate (SAA-C03) Exam, 4th Edition comprehensively and effectively prepares you for the challenging SAA-C03 Exam. This Study Guide contains efficient and accurate study tools that will help you succeed on the exam. It offers access to the Sybex online learning environment and test bank, containing hundreds of test questions, bonus practice exams, a glossary of key terms, and electronic flashcards.

In this complete and authoritative exam prep blueprint, Ben Piper and David Clinton show you how to:

• Design resilient AWS architectures
• Create high-performing solutions
• Craft secure applications and architectures
• Design inexpensive and cost-optimized architectures

An essential resource for anyone trying to start a new career as an Amazon Web Services cloud solutions architect, the AWS Certified Solutions Architect Study Guide: Associate (SAA-C03) Exam, 4th Edition will also prove invaluable to currently practicing AWS professionals looking to brush up on the fundamentals of their work.

This friendly, fast-paced guide is perfect for anyone puzzled by the cloud! Learn the fundamentals of Amazon Web Services, and be ready to ace your AWS Certified Cloud Practitioner Exam.

In AWS for Non-engineers you will learn:

• How cloud computing and AWS are different from “legacy” systems
• Prepare for the AWS Certified Cloud Practitioner Exam
• When cloud computing is the right option for your organization
• Core AWS services including storage services, database services, and security services
• How billing and pricing work on AWS, and how to pick for your budget
• Security and compliance concepts for building in AWS

AWS for Non-engineers is for anyone just starting with Amazon Web Services or cloud computing in general—whether you’re in customer service, marketing, or management. It’s written by Hiroko Nishimura, and is based on her acclaimed video courses that have been taken by over 300,000 learners. In this reader-friendly book, you’ll learn how to talk about cloud concepts with engineers, what the cloud could do for your business, and how to start using AWS’s amazing services for your own IT tasks. When you’re finished, you’ll be comfortable with the basics of cloud computing on AWS and you’ll be prepared to take the AWS Certified Cloud Practitioner Exam!

Are you excited to harness the power of AWS and unlock endless possibilities for your business? Look no further than the second edition of AWS for Solutions Architects! Imagine crafting cloud solutions that are secure, scalable, and optimized – not just good, but industry-leading.

This updated guide throws open the doors to the AWS Well-Architected Framework, design pillars, and cloud-native design patterns empowering you to craft secure, performant, and cost-effective cloud architectures. Tame the complexities of networking, conquering edge deployments and crafting seamless hybrid cloud connections. Uncover the secrets of big data and streaming with EMR, Glue, Kinesis, and MSK, extracting valuable insights from data at speeds you never thought possible. Future-proof your cloud with game-changing insights! New chapters unveil CloudOps, machine learning, IoT, and blockchain, empowering you to build transformative solutions. Plus, unlock the secrets of storage mastery, container excellence, and data lake patterns. From simple configurations to sophisticated architectures, this guide equips you with the knowledge to solve any cloud challenge and impress even the most demanding clients.

This book is your one-stop shop for architecting industry-standard AWS solutions. Stop settling for average – dive in and build like a pro!

What you will learn

• Optimize your Cloud Workload using the AWS Well-Architected Framework
• Learn methods to migrate your workload using the AWS Cloud Adoption Framework
• Apply cloud automation at various layers of application workload to increase efficiency
• Build a landing zone in AWS and hybrid cloud setups with deep networking techniques
• Select reference architectures for business scenarios, like data lakes, containers, and serverless apps
• Apply emerging technologies in your architecture, including AI/ML, IoT and blockchain

Who this book is for

This book is for application and enterprise architects, developers, and operations engineers who want to become well versed with AWS architectural patterns, best practices, and advanced techniques to build scalable, secure, highly available, highly tolerant, and cost-effective solutions in the cloud. Existing AWS users are bound to learn the most, but it will also help those curious about how leveraging AWS can benefit their organization. Prior knowledge of any computing language is not needed, and there’s little to no code. Prior experience in software architecture design will prove helpful.

AWS Lambda in Action is an example-driven tutorial that teaches you how to build applications that use an event-driven approach on the back end.

Running your systems in the cloud doesn’t automatically make them secure. Learn the tools and new management approaches you need to create secure apps and infrastructure on AWS.

In AWS Security you’ll learn how to:

• Securely grant access to AWS resources to coworkers and customers
• Develop policies for ensuring proper access controls
• Lock-down network controls using VPCs
• Record audit logs and use them to identify attacks
• Track and assess the security of an AWS account
• Counter common attacks and vulnerabilities

Written by security engineer Dylan Shields, AWS Security provides comprehensive coverage on the key tools and concepts you can use to defend AWS-based systems. You’ll learn how to honestly assess your existing security protocols, protect against the most common attacks on cloud applications, and apply best practices to configuring identity and access management and virtual private clouds.

How do you deal with the problems you face when using Azure? This practical guide provides over 75 recipes to help you to work with common Azure issues in everyday scenarios. That includes key tasks like setting up permissions for a storage account, working with Cosmos DB APIs, managing Azure role-based access control, governing your Azure subscriptions using Azure Policy, and much more.

Author Reza Salehi has assembled real-world recipes that enable you to grasp key Azure services and concepts quickly. Each recipe includes CLI scripts that you can execute in your own Azure account. Recipes also explain the approach and provide meaningful context. The solutions in this cookbook will take you beyond theory and help you understand Azure services in practice.

You'll find recipes that let you:

• Store data in an Azure storage account or in a data lake
• Work with relational and nonrelational databases in Azure
• Manage role-based access control (RBAC) for Azure resources
• Safeguard secrets in Azure Key Vault
• Govern your Azure subscription using Azure Policy
• Use CLI code to construct your application or fix a particular problem

Azure Databricks is a unified collaborative platform for performing scalable analytics in an interactive environment. The Azure Databricks Cookbook provides recipes to get hands-on with the analytics process, including ingesting data from various batch and streaming sources and building a modern data warehouse.

The book starts by teaching you how to create an Azure Databricks instance within the Azure portal, Azure CLI, and ARM templates. You’ll work through clusters in Databricks and explore recipes for ingesting data from sources, including files, databases, and streaming sources such as Apache Kafka and EventHub. The book will help you explore all the features supported by Azure Databricks for building powerful end-to-end data pipelines. You'll also find out how to build a modern data warehouse by using Delta tables and Azure Synapse Analytics. Later, you’ll learn how to write ad hoc queries and extract meaningful insights from the data lake by creating visualizations and dashboards with Databricks SQL. Finally, you'll deploy and productionize a data pipeline as well as deploy notebooks and Azure Databricks service using continuous integration and continuous delivery (CI/CD).

By the end of this Azure book, you'll be able to use Azure Databricks to streamline different processes involved in building data-driven apps.

What you will learn

• Read and write data from and to various Azure resources and file formats
• Build a modern data warehouse with Delta Tables and Azure Synapse Analytics
• Explore jobs, stages, and tasks and see how Spark lazy evaluation works
• Handle concurrent transactions and learn performance optimization in Delta tables
• Learn Databricks SQL and create real-time dashboards in Databricks SQL
• Integrate Azure DevOps for version control, deploying, and productionizing solutions with CI/CD pipelines
• Discover how to use RBAC and ACLs to restrict data access
• Build end-to-end data processing pipeline for near real-time data analytics

Who this book is for

This recipe-based book is for data scientists, data engineers, big data professionals, and machine learning engineers who want to perform data analytics on their applications. Prior experience of working with Apache Spark and Azure is necessary to get the most out of this book.

Master ARM templates, Bicep, and other Azure Infrastructure-as-Code tools, techniques, and practices to build infrastructure on the Azure cloud.

In Azure Infrastructure as Code you will learn how to:

• Create reusable infrastructure templates using advanced features of the ARM (Azure Resource Manager) syntax
• Write templates with the Azure Bicep domain-specific language (DSL)
• Test ARM and Bicep templates
• Deploy templates using deployment pipelines
• Guarantee repeated outcomes when you reuse templates to replicate infrastructure
• Share templates between teams
• Provision templates to provide standards and Azure Policy to enforce them
• Orchestrate complex deployments using Azure DevOps and GitHub Actions
• Pre-provision environments for other teams with deployment stacks

Azure Infrastructure as Code teaches you to use Azure’s native infrastructure as code (IaC) tools, like ARM and Bicep, to build, manage, and scale infrastructure with just a few lines of code. You’ll discover ARM templates, deployment stacks, and the powerful new language Bicep. See how easy they make it to create new environments, safely make infrastructure changes, govern your resources using Azure Policy, and prevent configuration drift. Loaded with in-depth coverage of syntax and lots of illustrative examples, this hands-on guide is a must-read for anyone looking to expand their knowledge of provisioning.

Secure your Azure applications the right way. The expert DevSecOps techniques you'll learn in this essential handbook make it easy to keep your data safe.

As a Program Manager at Microsoft, Bojan Magusic has helped numerous Fortune 500 companies improve their security posture in Azure. Now, in

Azure Security he brings his experience from the cyber security frontline to ensure your Azure cloud-based systems are safe and secure.

In Azure Security you’ll learn vital security skills, including how to:

• Set up secure access through Conditional Access policiesImplement Azure WAF on Application Gateway and Front Door
• Deploy Azure Firewall Premium for monitoring network activities
• Enable Microsoft Defender for Cloud to assess workload configurations
• Utilize Microsoft Sentinel for threat detection and analytics
• Establish Azure Policy for compliance with business rules

Correctly set up out-of-the-box Azure services to protect your web apps against both common and sophisticated threats, learn to continuously assess your systems for vulnerabilities, and discover cutting-edge operations for security hygiene, monitoring, and DevSecOps. Each stage is made clear and easy to follow with step-by-step instructions, complemented by helpful screenshots and diagrams.

The Microsoft Azure cloud is an ideal platform for data-intensive applications. Designed for productivity, Azure provides pre-built services that make collection, storage, and analysis much easier to implement and manage.

Azure Storage, Streaming, and Batch Analytics teaches you how to design a reliable, performant, and cost-effective data infrastructure in Azure by progressively building a complete working analytics system.

Use this guide book in its fully updated second edition to study for the ITIL 4 Foundation certification exam. Know the latest ITIL framework and DevOps concepts.

The book will take you through the new ITIL framework and nuances of the DevOps methodology. The book follows the topics included in the foundation certification exam syllabus and includes new sections on ITIL's guiding principles, service value chain, and the four dimensions of service management. Also included are the concepts, processes, and philosophies used in DevOps programs and projects. ITIL and DevOps concepts are explained with relevant examples.

By the time you finish this book, you will have a complete understanding of ITIL 4 and will be ready to take the ITIL 4 Foundation certification exam. You will know the DevOps methodology and how ITIL reinforces the philosophy of shared responsibility and collaboration. Over the course of a week, even while working your day job, you will be prepared to take the exam.

What You Will Learn

• Know the basics of ITIL as you prepare for the ITIL Foundation certification exam
• Understand ITIL through examples
• Be aware of ITIL's relevance to DevOps and DevOps concepts

Who This Book Is For

Professionals from the IT services industry

Do you wish the existing books on site reliability engineering started at the beginning? Do you wish someone would walk you through how to become an SRE, how to think like an SRE, or how to build and grow a successful SRE function in your organization?

Becoming SRE addresses all of these needs and more with three interconnected sections: the essential groundwork for understanding SRE and SRE culture, advice for individuals on becoming an SRE, and guidance for organizations on creating and developing a thriving SRE practice.

Acting as your personal and personable guide, author David Blank-Edelman takes you through subjects like:

• SRE mindset, SRE culture, and SRE advocacy
• What you need to get started and hired in SRE and what the job will be like when you get there
• What you need to bring SRE into an organization and what is required for a good organizational fit so it can thrive there
• How to work with your business folks and management around SRE
• How SRE can grow and mature in an organization over time

Ready to become an SRE or introduce SRE into your organization? This book is here to help.

Organizations today often struggle to balance business requirements with ever-increasing volumes of data. Additionally, the demand for leveraging large-scale, real-time data is growing rapidly among the most competitive digital industries. Conventional system architectures may not be up to the task. With this practical guide, you’ll learn how to leverage large-scale data usage across the business units in your organization using the principles of event-driven microservices.

Author Adam Bellemare takes you through the process of building an event-driven microservice-powered organization. You’ll reconsider how data is produced, accessed, and propagated across your organization. Learn powerful yet simple patterns for unlocking the value of this data. Incorporate event-driven design and architectural principles into your own systems. And completely rethink how your organization delivers value by unlocking near-real-time access to data at scale.

You’ll learn:

• How to leverage event-driven architectures to deliver exceptional business value
• The role of microservices in supporting event-driven designs
• Architectural patterns to ensure success both within and between teams in your organization
• Application patterns for developing powerful event-driven microservices
• Components and tooling required to get your microservice ecosystem off the ground

As organizations shift from monolithic applications to smaller, self-contained microservices, distributed systems have become more fine-grained. But developing these new systems brings its own host of problems. This expanded second edition takes a holistic view of topics that you need to consider when building, managing, and scaling microservices architectures.

Through clear examples and practical advice, author Sam Newman gives everyone from architects and developers to testers and IT operators a firm grounding in the concepts. You'll dive into the latest solutions for modeling, integrating, testing, deploying, and monitoring your own autonomous services. Real-world cases reveal how organizations today manage to get the most out of these architectures.

Microservices technologies continue to move quickly. This book brings you up to speed.

• Get new information on user interfaces, container orchestration, and serverless
• Align system design with your organization's goals
• Explore options for integrating a service with your system
• Understand how to independently deploy microservices
• Examine the complexities of testing and monitoring distributed services
• Manage security with expanded content around user-to-service and service-to-service models

FastAPI is an Asynchronous Server Gateway Interface (ASGI)-based framework that can help build modern, manageable, and fast microservices. Because of its asynchronous core platform, this ASGI-based framework provides the best option when it comes to performance, reliability, and scalability over the WSGI-based Django and Flask. When working with Python, Flask, and Django microservices, you'll be able to put your knowledge to work with this practical guide to building seamlessly manageable and fast microservices.

You'll begin by understanding the background of FastAPI and learning how to install, configure, and use FastAPI to decompose business units. You'll explore a unique and asynchronous REST API framework that can provide a better option when it comes to building microservices. After that, this book will guide you on how to apply and translate microservices design patterns in building various microservices applications and RESTful APIs using the FastAPI framework.

By the end of this microservices book, you'll be able to understand, build, deploy, test, and experiment with microservices and their components using the FastAPI framework.

What you will learn

• Understand, orient, and implement REST APIs using the basic components of the FastAPI framework
• Build asynchronous as well as synchronous REST services using the built-in pydantic module and asyncio support
• Create small-scale and large-scale microservices applications using features supported by FastAPI
• Build event-driven and message-driven applications using the framework
• Create an asynchronous and synchronous data layer with both relational and NoSQL databases
• Perform numerical and symbolic computations with FastAPI

Who this book is for

This book is for Python web developers, advanced Python developers, and backend developers using Flask or Django who want to learn how to use the FastAPI framework to implement microservices. Readers familiar with the REST API and microservices will also benefit from this book. Some parts of the book contain general concepts, processes, and instructions that intermediate-level developers and Python enthusiasts can relate to as well.

The ability to administer and monitor a Kubernetes cluster is in high demand today. To meet this need, the Cloud Native Computing Foundation developed a certification exam to establish an administrator's credibility and value in the job market to confidently work in a Kubernetes environment.

The Certified Kubernetes Administrator (CKA) certification exam is different from the typical multiple-choice format of other professional certifications. Instead, the CKA is a performance-based exam that requires deep knowledge of the tasks under immense time pressure.

This study guide walks you through all the topics covered to fully prepare you for the exam. Author Benjamin Muschko also shares his personal experience with preparing for all aspects of the exam.

• Learn when and how to apply Kubernetes concepts to administer and troubleshoot a production-grade cluster
• Understand the objectives, abilities, and tips and tricks needed to pass the CKA exam
• Explore the ins and outs of the kubectl command-line tool
• Demonstrate competency to perform the responsibilities of a Kubernetes administrator
• Solve real-world Kubernetes problems in a hands-on command-line environment
• Effectively navigate and solve questions during the CKA exam

Vulnerabilities in software and IT infrastructure pose a major threat to organizations. In response, the Cloud Native Computing Foundation (CNCF) developed the Certified Kubernetes Security Specialist (CKS) certification to verify an administrator's proficiency to protect Kubernetes clusters and the cloud native software they contain. This practical book helps you fully prepare for the certification exam by walking you through all of the topics covered.

Different from typical multiple-choice formats used by other certifications, this performance-based exam requires deep knowledge of the tasks it covers under intense time pressure. If you want to pass the CKS exam on the first go, author Benjamin Muschko shares his personal experience to help you learn the objectives, abilities, and tips and tricks you need to pass on the first attempt.

• Identify, mitigate, and/or minimize threats to cloud native applications and Kubernetes clusters
• Learn the ins and outs of Kubernetes's security features, and external tools for security detection and mitigation purposes
• Demonstrate competency to perform the responsibilities of a Kubernetes administrator or application developer with a security viewpoint
• Solve real-world Kubernetes problems in a hands-on, command-line environment
• Effectively navigate and solve questions during the CKS exam

Auto engineers test the safety of a car by intentionally crashing it and carefully observing the results. Chaos engineering applies the same principles to software systems. In

Chaos Engineering: Site reliability through controlled disruption, you’ll learn to run your applications and infrastructure through a series of tests that simulate real-life failures. You'll maximize the benefits of chaos engineering by learning to think like a chaos engineer, and how to design the proper experiments to ensure the reliability of your software. With examples that cover a whole spectrum of software, you'll be ready to run an intensive testing regime on anything from a simple WordPress site to a massive distributed system running on Kubernetes.

Cloud computing has become an integral and foundational part of information technology. The majority of digital business activity and technology innovation occurs with the involvement of contemporary cloud environments that provide highly sophisticated automated technology infrastructure and a vast range of technology resources. To successfully build upon, interact with, or create a cloud environment requires an understanding of its common inner mechanics, architectural layers, models, and security controls. It also requires an understanding of the business and economic factors that justify the adoption and real-world use of clouds and cloud-based products and services.

In Cloud Computing: Concepts, Technology, Security & Architecture, Thomas Erl, one of the worlds top-selling IT authors, teams up with cloud computing expert Eric Barceló Monroy and researchers to break down proven and mature cloud computing technologies and practices into a series of well-defined concepts, technology mechanisms, and technology architectures. Comprehensive coverage of containerization and cybersecurity topics is also included.

All chapters are carefully authored from an industry-centric and vendor-neutral point of view. In doing so, the book establishes concrete, academic coverage with a focus on structure, clarity, and well-defined building blocks for mainstream cloud computing and containerization platforms and solutions. With nearly 370 figures, 40 architectural models, and 50 mechanisms, this indispensable guide provides a comprehensive education of contemporary cloud computing, containerization, and cybersecurity that will never leave your side.

FinOps brings financial accountability to the variable spend model of cloud. Used by the majority of global enterprises, this management practice has grown from a fringe activity to the de facto discipline managing cloud spend. In this book, authors J.R. Storment and Mike Fuller outline the process of building a culture of cloud FinOps by drawing on real-world successes and failures of large-scale cloud spenders.

Engineering and finance teams, executives, and FinOps practitioners alike will learn how to build an efficient and effective FinOps machine for data-driven cloud value decision-making. Complete with a road map to get you started, this revised second edition includes new chapters that cover forecasting, sustainability, and connectivity to other frameworks.

You'll learn:

• The DNA of a highly functional cloud FinOps culture
• A road map to build executive support for FinOps adoption
• How to understand and forecast your cloud spending
• How to empower engineering and finance to work together
• Cost allocation strategies to create accountability for cloud and container spend
• Strategies for rate discounts from cloud commitments
• When and how to implement automation of repetitive cost tasks
• How to empower engineering team action on cost efficiency

Cloud Native Patterns is your guide to developing strong applications that thrive in the dynamic, distributed, virtual world of the cloud. This book presents a mental model for cloud-native applications, along with the patterns, practices, and tooling that set them apart.

Don’t fly blind. Observability gives you actionable insights into your cloud native systems—from pinpointing errors, to increasing developer productivity, to tracking compliance.

Observability is the difference between an error message and an error explanation with a recipe how to resolve the error! You know exactly which service is affected, who’s responsible for its repair, and even how it can be optimized in the future. Cloud Observability in Action teaches you how to set up an observability system that learns from a cloud application’s signals, logging, and monitoring, all using free and open source tools.

In Cloud Observability in Action you will learn how to:

• Apply observability in cloud native systems
• Understand observability signals, including their costs and benefits
• Apply good practices around instrumentation and signal collection
• Deliver dashboarding, alerting, and SLOs/SLIs at scale
• Choose the correct signal types for given roles or tasks
• Pick the right observability tool for any given function
• Communicate the benefits of observability to management

A well-designed observability system provides insight into bugs and performance issues in cloud native applications. They help your development team understand the impact of code changes, measure optimizations, and track user experience. Best of all, observability can even automate your error handling so that machine users apply their own fixes—no more 3AM calls for emergency outages.

Complete coverage of every objective for the CompTIA Cloud+ exam.

Take the CompTIA Cloud+ exam with confidence using this highly effective self-study guide. CompTIA Cloud+™ Certification All-in-One Exam Guide (Exam CV0-003) offers complete coverage of every topic on the latest version of the exam. You’ll find learning objectives at the beginning of each chapter, exam tips, in-depth explanations, and practice exam questions. You will get in-depth explanations of the latest cloud computing concepts, models, and terminology; disk storage systems; networking storage and infrastructure; virtualization components; security best practices, and more. Designed to help you pass the CV0-003 exam with ease, this definitive guide also serves as an essential on-the-job reference.

To facilitate scalability and resilience, many organizations now run applications in cloud native environments using containers and orchestration. But how do you know if the deployment is secure? This practical book examines key underlying technologies to help developers, operators, and security professionals assess security risks and determine appropriate solutions.

Author Liz Rice, Chief Open Source Officer at Isovalent, looks at how the building blocks commonly used in container-based systems are constructed in Linux. You'll understand what's happening when you deploy containers and learn how to assess potential security risks that could affect your deployments. If you run container applications with kubectl or docker and use Linux command-line tools such as ps and grep, you're ready to get started.

• Explore attack vectors that affect container deployments
• Dive into the Linux constructs that underpin containers
• Examine measures for hardening containers
• Understand how misconfigurations can compromise container isolation
• Learn best practices for building container images
• Identify container images that have known software vulnerabilities
• Leverage secure connections between containers
• Use security tooling to prevent attacks on your deployment

Getting software released to users is often a painful, risky, and time-consuming process.

This groundbreaking new book sets out the principles and technical practices that enable rapid, incremental delivery of high quality, valuable new functionality to users. Through automation of the build, deployment, and testing process, and improved collaboration between developers, testers, and operations, delivery teams can get changes released in a matter of hours—sometimes even minutes–no matter what the size of a project or the complexity of its code base.

Jez Humble and David Farley begin by presenting the foundations of a rapid, reliable, low-risk delivery process. Next, they introduce the “deployment pipeline,” an automated process for managing all changes, from check-in to release. Finally, they discuss the “ecosystem” needed to support continuous delivery, from infrastructure, data and configuration management to governance.

The authors introduce state-of-the-art techniques, including automated infrastructure management and data migration, and the use of virtualization. For each, they review key issues, identify best practices, and demonstrate how to mitigate risks. Coverage includes

• Automating all facets of building, integrating, testing, and deploying software
• Implementing deployment pipelines at team and organizational levels
• Improving collaboration between developers, testers, and operations
• Developing features incrementally on large and distributed teams
• Implementing an effective configuration management strategy
• Automating acceptance testing, from analysis to implementation
• Testing capacity and other non-functional requirements
• Implementing continuous deployment and zero-downtime releases
• Managing infrastructure, data, components and dependencies
• Navigating risk management, compliance, and auditing

Whether you’re a developer, systems administrator, tester, or manager, this book will help your organization move from idea to release faster than ever—so you can deliver value to your business rapidly and reliably.

Use continuous Integration (CI) and continuous delivery (CD) to improve the speed of software delivery. This book presents a game changer—how to use pipelines to automate the software delivery process. The theories about CI/CD are much the same, but the book covers what the development of pipelines looks like and how testing of pipelines themselves should be performed.

Most teams just plunge into coding, without thinking about the CI/CD process itself. Why don’t we use the same development method for pipelines that we use for apps?

Pipelines code development undergoes similar stages as application code development, such as requirements analysis, development, testing, implementation, operations, and monitoring. This is the starting point of the book. It describes the current challenges with pipeline development and how this process can be improved and structured. It describes in detail how to design pipelines and shows examples in BPMN 2.0 notation.

What You’ll Learn

• Know the shortcomings and challenges of current pipeline development such as misalignment between the pipeline engineer and the team’s workflow, the use of infrastructure as code (IaC), and pipeline security
• Understand the need for CI/CD requirements through the book's non-exhaustive list of more than 60 CI/CD requirements provided to inspire and increase awareness
• See how certain choices affect the way a pipeline is designed (and realized)
• Become familiar with branching strategy, build strategy, test strategy, release strategy, and deployment strategy that are explained in detail in the book, including their effect on pipeline design
• Know how pipelines can be unit tested, using a real-world example
• Know how performance bottlenecks in a pipeline occur, how they can be detected, and how they can be solved
• View a complete implementation, including code, showing how the guidelines in this book are applied to a real use case

Who This Book Is For

DevOps engineers and solution architects involved with automating the software supply chain and using application lifecycle management (ALM)/integration platforms such as Jenkins, CircleCI, Bamboo, and Azure DevOps; intermediate and experienced DevOps engineers (developers, ops engineers, test engineers); and ICT managers interested in the CI/CD pipeline development domain

Take a deep dive into Kubernetes inner components and discover what really powers a Kubernetes cluster. This in-depth guide shines a light on Kubernetes' murky internals, to help you better plan cloud native architectures and ensure the reliability of your systems.

In Core Kubernetes you will learn about:

• Kubernetes base components
• Kubernetes networking
• Storage and the Container Storage Interface
• External load balancing and ingress
• Kubernetes security
• Different ways of creating a Kubernetes cluster
• Configuring Kubernetes to use a GPU

To build and operate reliable Kubernetes-based systems, you need to understand what’s going on below the surface. Core Kubernetes is an in-depth guide to Kubernetes’ internal workings written by Kubernetes contributors Chris Love and Jay Vyas. It’s packed with experience-driven insights and advanced techniques you won’t find anywhere else.

You’ll understand the unique security concerns of container-based applications, minimize costly unused capacity, and get pro tips for maximizing performance. Diagrams, labs, and hands-on examples ensure that the complex ideas are easy to understand and practical to apply.

Build a data platform to the industry-leading standards set by Microsoft’s own infrastructure.

In Data Engineering on Azure you will learn how to:

• Pick the right Azure services for different data scenarios
• Manage data inventory
• Implement production quality data modeling, analytics, and machine learning workloads
• Handle data governance
• Using DevOps to increase reliability
• Ingesting, storing, and distributing data
• Apply best practices for compliance and access control

Data Engineering on Azure reveals the data management patterns and techniques that support Microsoft’s own massive data infrastructure. Author Vlad Riscutia, a data engineer at Microsoft, teaches you to bring an engineering rigor to your data platform and ensure that your data prototypes function just as well under the pressures of production. You'll implement common data modeling patterns, stand up cloud-native data platforms on Azure, and get to grips with DevOps for both analytics and machine learning.

This book, authored by a seasoned Senior Data Architect with 25 years of experience, aims to help you achieve proficiency in using the AWS ecosystem for data engineering. This revised edition provides updates in every chapter to cover the latest AWS services and features, takes a refreshed look at data governance, and includes a brand-new section on building modern data platforms which covers; implementing a data mesh approach, open-table formats (such as Apache Iceberg), and using DataOps for automation and observability.

You'll begin by reviewing the key concepts and essential AWS tools in a data engineer's toolkit and getting acquainted with modern data management approaches. You'll then architect a data pipeline, review raw data sources, transform the data, and learn how that transformed data is used by various data consumers. You’ll learn how to ensure strong data governance, and about populating data marts and data warehouses along with how a data lakehouse fits into the picture. After that, you'll be introduced to AWS tools for analyzing data, including those for ad-hoc SQL queries and creating visualizations. Then, you'll explore how the power of machine learning and artificial intelligence can be used to draw new insights from data. In the final chapters, you'll discover transactional data lakes, data meshes, and how to build a cutting-edge data platform on AWS.

By the end of this AWS book, you'll be able to execute data engineering tasks and implement a data pipeline on AWS like a pro!

What you will learn

• Seamlessly ingest streaming data with Amazon Kinesis Data Firehose
• Optimize, denormalize, and join datasets with AWS Glue Studio
• Use Amazon S3 events to trigger a Lambda process to transform a file
• Load data into a Redshift data warehouse and run queries with ease
• Visualize and explore data using Amazon QuickSight
• Extract sentiment data from a dataset using Amazon Comprehend
• Build transactional data lakes using Apache Iceberg with Amazon Athena
• Learn how a data mesh approach can be implemented on AWS

Who this book is for

This book is for data engineers, data analysts, and data architects who are new to AWS and looking to extend their skills to the AWS cloud. Anyone new to data engineering who wants to learn about the foundational concepts, while gaining practical experience with common data engineering services on AWS, will also find this book useful. A basic understanding of big data-related topics and Python coding will help you get the most out of this book, but it’s not a prerequisite. Familiarity with the AWS console and core services will also help you follow along.

With this book, you'll understand how the highly scalable Google Cloud Platform (GCP) enables data engineers to create end-to-end data pipelines right from storing and processing data and workflow orchestration to presenting data through visualization dashboards.

Starting with a quick overview of the fundamental concepts of data engineering, you'll learn the various responsibilities of a data engineer and how GCP plays a vital role in fulfilling those responsibilities. As you progress through the chapters, you'll be able to leverage GCP products to build a sample data warehouse using Cloud Storage and BigQuery and a data lake using Dataproc. The book gradually takes you through operations such as data ingestion, data cleansing, transformation, and integrating data with other sources. You'll learn how to design IAM for data governance, deploy ML pipelines with the Vertex AI, leverage pre-built GCP models as a service, and visualize data with Google Data Studio to build compelling reports. Finally, you'll find tips on how to boost your career as a data engineer, take the Professional Data Engineer certification exam, and get ready to become an expert in data engineering with GCP.

By the end of this data engineering book, you'll have developed the skills to perform core data engineering tasks and build efficient ETL data pipelines with GCP.

What you will learn

• Load data into BigQuery and materialize its output for downstream consumption
• Build data pipeline orchestration using Cloud Composer
• Develop Airflow jobs to orchestrate and automate a data warehouse
• Build a Hadoop data lake, create ephemeral clusters, and run jobs on the Dataproc cluster
• Leverage Pub/Sub for messaging and ingestion for event-driven systems
• Use Dataflow to perform ETL on streaming data
• Unlock the power of your data with Data Studio
• Calculate the GCP cost estimation for your end-to-end data solutions

Who this book is for

This book is for data engineers, data analysts, and anyone looking to design and manage data processing pipelines using GCP. You'll find this book useful if you are preparing to take Google's Professional Data Engineer exam. Beginner-level understanding of data science, the Python programming language, and Linux commands is necessary. A basic understanding of data processing and cloud computing, in general, will help you make the most out of this book.

The Snowflake Data Cloud is one of the fastest-growing platforms for data warehousing and application workloads. Snowflake's scalable, cloud-native architecture and expansive set of features and objects enables you to deliver data solutions quicker than ever before.

Yet, we must ensure that these solutions are developed using recommended design patterns and accompanied by documentation that’s easily accessible to everyone in the organization.

This book will help you get familiar with simple and practical data modeling frameworks that accelerate agile design and evolve with the project from concept to code. These universal principles have helped guide database design for decades, and this book pairs them with unique Snowflake-native objects and examples like never before – giving you a two-for-one crash course in theory as well as direct application.

By the end of this Snowflake book, you’ll have learned how to leverage Snowflake’s innovative features, such as time travel, zero-copy cloning, and change-data-capture, to create cost-effective, efficient designs through time-tested modeling principles that are easily digestible when coupled with real-world examples.

What you will learn

• Discover the time-saving benefits and applications of data modeling
• Learn about Snowflake’s cloud-native architecture and its features
• Understand and apply modeling techniques using Snowflake objects
• Universal modeling concepts and language through Snowflake objects
• Get comfortable reading and transforming semistructured data
• Learn directly with pre-built recipes and examples
• Learn to apply modeling frameworks from Star to Data Vault

Who this book is for

This book is for developers working with SQL who are looking to build a strong foundation in modeling best practices and gain an understanding of where they can be effectively applied to save time and effort. Whether you’re an ace in SQL logic or starting out in database design, this book will equip you with the practical foundations of data modeling to guide you on your data journey with Snowflake. Developers who’ve recently discovered Snowflake will be able to uncover its core features and learn to incorporate them into universal modeling frameworks.

When it comes to choosing, using, and maintaining a database, understanding its internals is essential. But with so many distributed databases and tools available today, it’s often difficult to understand what each one offers and how they differ. With this practical guide, Alex Petrov guides developers through the concepts behind modern database and storage engine internals.

Throughout the book, you’ll explore relevant material gleaned from numerous books, papers, blog posts, and the source code of several open source databases. These resources are listed at the end of parts one and two. You’ll discover that the most significant distinctions among many modern databases reside in subsystems that determine how storage is organized and how data is distributed.

This book examines:

• Storage engines: Explore storage classification and taxonomy, and dive into B-Tree-based and immutable Log Structured storage engines, with differences and use-cases for each
• Storage building blocks: Learn how database files are organized to build efficient storage, using auxiliary data structures such as Page Cache, Buffer Pool and Write-Ahead Log
• Distributed systems: Learn step-by-step how nodes and processes connect and build complex communication patterns
• Database clusters: Which consistency models are commonly used by modern databases and how distributed storage systems achieve consistency

With the immense cost savings and scalability the cloud provides, the rationale for building cloud native applications is no longer in question. The real issue is how. With this practical guide, developers will learn about the most commonly used design patterns for building cloud native applications using APIs, data, events, and streams in both greenfield and brownfield development.

You'll learn how to incrementally design, develop, and deploy large and effective cloud native applications that you can manage and maintain at scale with minimal cost, time, and effort. Authors Kasun Indrasiri and Sriskandarajah Suhothayan highlight use cases that effectively demonstrate the challenges you might encounter at each step.

• Learn the fundamentals of cloud native applications
• Explore key cloud native communication, connectivity, and composition patterns
• Learn decentralized data management techniques
• Use event-driven architecture to build distributed and scalable cloud native applications
• Explore the most commonly used patterns for API management and consumption
• Examine some of the tools and technologies you'll need for building cloud native systems

Data is at the center of many challenges in system design today. Difficult issues need to be figured out, such as scalability, consistency, reliability, efficiency, and maintainability. In addition, we have an overwhelming variety of tools, including relational databases, NoSQL datastores, stream or batch processors, and message brokers. What are the right choices for your application? How do you make sense of all these buzzwords?

In this practical and comprehensive guide, author Martin Kleppmann helps you navigate this diverse landscape by examining the pros and cons of various technologies for processing and storing data. Software keeps changing, but the fundamental principles remain the same. With this book, software engineers and architects will learn how to apply those ideas in practice, and how to make full use of data in modern applications.

• Peer under the hood of the systems you already use, and learn how to use and operate them more effectively
• Make informed decisions by identifying the strengths and weaknesses of different tools
• Navigate the trade-offs around consistency, scalability, fault tolerance, and complexity
• Understand the distributed systems research upon which modern databases are built
• Peek behind the scenes of major online services, and learn from their architectures

Without established design patterns to guide them, developers have had to build distributed systems from scratch, and most of these systems are very unique indeed. Today, the increasing use of containers has paved the way for core distributed system patterns and reusable containerized components. This practical guide presents a collection of repeatable, generic patterns to help make the development of reliable distributed systems far more approachable and efficient.

Author Brendan Burns—Director of Engineering at Microsoft Azure—demonstrates how you can adapt existing software design patterns for designing and building reliable distributed applications. Systems engineers and application developers will learn how these long-established patterns provide a common language and framework for dramatically increasing the quality of your system.

• Understand how patterns and reusable components enable the rapid development of reliable distributed systems
• Use the side-car, adapter, and ambassador patterns to split your application into a group of containers on a single machine
• Explore loosely coupled multi-node distributed patterns for replication, scaling, and communication between the components
• Learn distributed system patterns for large-scale batch data processing covering work-queues, event-based processing, and coordinated workflows

If you’re a software engineer, developer, or sys admin who needs to get up to speed with DevOps quickly, this book covers the basics you need to thrive in a modern application stack.

This book’s fast-paced, hands-on examples will provide the foundation you need to start performing common DevOps tasks. You’ll explore how to implement Infrastructure as Code (IaC) and configuration management (CM)—essential practices for designing secure and stable systems. You’ll take a tour of containerization and set up an automated continuous delivery (CI/CD) pipeline that builds, tests, and deploys code. You’ll dig into how to detect a system’s state and alert on it when things go sideways.

You’ll learn how to:

• Create and provision an Ubuntu VM with Vagrant and Ansible
• Manage users, groups, and password security
• Set up public key and two-factor authentication over SSH
• Automate and test a host-based firewall
• Use Docker to containerize applications and Kubernetes for orchestration
• Build a monitoring stack and troubleshoot problems and performance issues

DevOps for the Desperate is a practical, no-nonsense guide to get you up and running quickly in today’s full-stack infrastructure.

Most applications, even the funky cloud-native microservices ones, need high-performance, production-grade infrastructure to run on. Having impeccable knowledge of Docker will help you thrive in the modern cloud-first world. With this book, you will gain the skills you need in order to work with Docker and its containers.

The book begins with an introduction to containers and explains their functionality and application in the real world. You will then get an overview of VMware, Kubernetes, and Docker and learn to install Docker on Windows, Mac, and Linux. Once you have understood the Ops and Dev perspective of Docker, you will be able to see the big picture and understand what Docker exactly does. The book then turns its attention to the more technical aspects, guiding you through practical exercises covering Docker engine, Docker images, and Docker containers. You will learn techniques for containerizing an app, deploying apps with Docker Compose, and managing cloud-native applications with Swarm. You will also build Docker networks and Docker overlay networks and handle applications that write persistent data. Finally, you will deploy apps with Docker stacks and secure your Docker environment.

By the end of this book, you will be well-versed in Docker and containers and have developed the skills to create, deploy, and run applications on the cloud.

What you will learn

• Become familiar with the applications of Docker and containers
• Discover how to pull images into Docker host’s local registry
• Find out how to containerize an app with new example apps
• Cover multi-platform builds to test Docker overlay network in the swarm mode
• Use Docker Compose to deploy and manage multi-container applications
• Share sensitive data with containers and Swarm services securely

Who this book is for

Whether you are a beginner or an experienced developer looking to utilize Docker to develop and operate cloud-native microservices apps, this book is for you. Anyone who wants to learn Docker orchestration, networking, imaging, and security will also find it useful. No prior knowledge of Docker is necessary.

Docker in Action, Second Edition teaches you the skills and knowledge you need to create, deploy, and manage applications hosted in Docker containers. This bestseller has been fully updated with new examples, best practices, and a number of entirely new chapters.

Docker in Practice, Second Edition presents over 100 practical techniques, hand-picked to help you get the most out of Docker. Following a Problem/Solution/Discussion format, you'll walk through specific examples that you can use immediately, and you'll get expert guidance on techniques that you can apply to a whole range of scenarios.

Docker and Linux containers have fundamentally changed the way that organizations develop, deliver, and run software at scale. But understanding why these tools are important and how they can be successfully integrated into your organization's ecosystem can be challenging. This fully updated guide provides developers, operators, architects, and technical managers with a thorough understanding of the Docker tool set and how containers can improve almost every aspect of modern software delivery and management.

This edition includes significant updates to the examples and explanations that reflect the substantial changes that have occurred since Docker was first released almost a decade ago. Sean Kane and Karl Matthias have updated the text to reflect best practices and to provide additional coverage of new features like BuildKit, multi-architecture image support, rootless containers, and much more.

• Learn how Docker and Linux containers integrate with cloud services and Kubernetes
• Experience building OCI images, plus deploying and managing Linux containers with powerful command-line tools
• Understand how OCI images simplify dependency management and deployment workflow for your applications
• Learn practical techniques for deploying and testing Linux containers in production
• Deploy production containers at scale wherever you need them
• Explore advanced Docker topics, including deployment tools, networking, orchestration, security, and configuration

Simplify data science infrastructure to give data scientists an efficient path from prototype to production.

In Effective Data Science Infrastructure you will learn how to:

• Design data science infrastructure that boosts productivity
• Handle compute and orchestration in the cloud
• Deploy machine learning to production
• Monitor and manage performance and results
• Combine cloud-based tools into a cohesive data science environment
• Develop reproducible data science projects using Metaflow, Conda, and Docker
• Architect complex applications for multiple teams and large datasets
• Customize and grow data science infrastructure

Effective Data Science Infrastructure: How to make data scientists more productive is a hands-on guide to assembling infrastructure for data science and machine learning applications. It reveals the processes used at Netflix and other data-driven companies to manage their cutting edge data infrastructure. In it, you’ll master scalable techniques for data storage, computation, experiment tracking, and orchestration that are relevant to companies of all shapes and sizes. You’ll learn how you can make data scientists more productive with your existing cloud infrastructure, a stack of open source software, and idiomatic Python.

The author is donating proceeds from this book to charities that support women and underrepresented groups in data science.

Build powerful, production-ready search applications using the incredible features of Elasticsearch.

In Elasticsearch in Action, Second Edition you will discover:

• Architecture, concepts, and fundamentals of Elasticsearch
• Installing, configuring, and running Elasticsearch and Kibana
• Creating an index with custom settings
• Data types, mapping fundamentals, and templates
• Fundamentals of text analysis and working with text analyzers
• Indexing, deleting, and updating documents
• Indexing data in bulk, and reindexing and aliasing operations
• Learning search concepts, relevancy scores, and similarity algorithms

Elasticsearch in Action, Second Edition teaches you to build scalable search applications using Elasticsearch. This completely new edition explores Elasticsearch fundamentals from the ground up. You’ll deep dive into design principles, search architectures, and Elasticsearch’s essential APIs. Every chapter is clearly illustrated with diagrams and hands-on examples. You’ll even explore real-world use cases for full text search, data visualizations, and machine learning. Plus, its comprehensive nature means you’ll keep coming back to the book as a handy reference!

Enterprise Integration Patterns provides an invaluable catalog of sixty-five patterns, with real-world solutions that demonstrate the formidable of messaging and help you to design effective messaging solutions for your enterprise.

The authors also include examples covering a variety of different integration technologies, such as JMS, MSMQ, TIBCO ActiveEnterprise, Microsoft BizTalk, SOAP, and XSL. A case study describing a bond trading system illustrates the patterns in practice, and the book offers a look at emerging standards, as well as insights into what the future of enterprise integration might hold.

This book provides a consistent vocabulary and visual notation framework to describe large-scale integration solutions across many technologies. It also explores in detail the advantages and limitations of asynchronous messaging architectures. The authors present practical advice on designing code that connects an application to a messaging system, and provide extensive information to help you determine when to send a message, how to route it to the proper destination, and how to monitor the health of a messaging system. If you want to know how to manage, monitor, and maintain a messaging system once it is in use, get this book.

Enterprise Java Microservices is an example-rich tutorial that shows how to design and manage large-scale Java applications as a collection of microservices.

Event Streams in Action is a foundational book introducing the ULP paradigm and presenting techniques to use it effectively in data-rich environments.

Event-driven architecture in Golang is an approach used to develop applications that shares state changes asynchronously, internally, and externally using messages. EDA applications are better suited at handling situations that need to scale up quickly and the chances of individual component failures are less likely to bring your system crashing down. This is why EDA is a great thing to learn and this book is designed to get you started with the help of step-by-step explanations of essential concepts, practical examples, and more.

You'll begin building event-driven microservices, including patterns to handle data consistency and resiliency. Not only will you learn the patterns behind event-driven microservices but also how to communicate using asynchronous messaging with event streams. You'll then build an application made of several microservices that communicates using both choreographed and orchestrated messaging.

By the end of this book, you'll be able to build and deploy your own event-driven microservices using asynchronous communication.

What you will learn

• Understand different event-driven patterns and best practices
• Plan and design your software architecture with ease
• Track changes and updates effectively using event sourcing
• Test and deploy your sample software application with ease
• Monitor and improve the performance of your software architecture

Who this book is for

This hands-on book is for intermediate-level software architects, or senior software engineers working with Golang and interested in building asynchronous microservices using event sourcing, CQRS, and DDD. Intermediate-level knowledge of the Go syntax and concurrency features is necessary.

Prepare for Microsoft Exam AZ-104 and help demonstrate your real-world mastery of implementing and deploying Microsoft Azure Infrastructure as a Service (IaaS). Designed for experienced cloud professionals ready to advance their status, Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified Associate level. Focus on the expertise measured by these objectives:

• Manage Azure identities and governance
• Implement and manage storage
• Deploy and manage Azure compute resources
• Configure and manage virtual networking
• Monitor and back up Azure resources

This Microsoft Exam Ref:

• Organizes its coverage by exam objectives
• Features strategic, what-if scenarios to challenge you
• Assumes you are an experienced Azure administrator who understands and manages diverse storage, security, networking and/or compute cloud services

In many systems, scalability becomes the primary driver as the user base grows. Attractive features and high utility breed success, which brings more requests to handle and more data to manage. But organizations reach a tipping point when design decisions that made sense under light loads suddenly become technical debt. This practical book covers design approaches and technologies that make it possible to scale an application quickly and cost-effectively.

Author Ian Gorton takes software architects and developers through the foundational principles of distributed systems. You'll explore the essential ingredients of scalable solutions, including replication, state management, load balancing, and caching. Specific chapters focus on the implications of scalability for databases, microservices, and event-based streaming systems.

You will focus on:

• Foundations of scalable systems: Learn basic design principles of scalability, its costs, and architectural tradeoffs
• Designing scalable services: Dive into service design, caching, asynchronous messaging, serverless processing, and microservices
• Designing scalable data systems: Learn data system fundamentals, NoSQL databases, and eventual consistency versus strong consistency
• Designing scalable streaming systems: Explore stream processing systems and scalable event-driven processing

Quickly detect, troubleshoot, and prevent a wide range of data issues through data observability, a set of best practices that enables data teams to gain greater visibility of data and its usage. If you're a data engineer, data architect, or machine learning engineer who depends on the quality of your data, this book shows you how to focus on the practical aspects of introducing data observability in your everyday work.

Author Andy Petrella helps you build the right habits to identify and solve data issues, such as data drifts and poor quality, so you can stop their propagation in data applications, pipelines, and analytics. You'll learn ways to introduce data observability, including setting up a framework for generating and collecting all the information you need.

• Learn the core principles and benefits of data observability
• Use data observability to detect, troubleshoot, and prevent data issues
• Follow the book's recipes to implement observability in your data projects
• Use data observability to create a trustworthy communication framework with data consumers
• Learn how to educate your peers about the benefits of data observability

In the newly revised third edition of Fundamentals of Database Management Systems, veteran database expert Dr. Mark Gillenson delivers an authoritative and comprehensive account of contemporary database management. The Third Edition assists readers in understanding critical topics in the subject, including data modeling, relational database concepts, logical and physical database design, SQL, data administration, data security, NoSQL, blockchain, database in the cloud, and more.

The author offers a firm grounding in the fundamentals of database while, at the same time, providing a wide-ranging survey of database subfields relevant to information systems professionals. And, now included in the supplements, the author's audio narration of the included PowerPoint slides! Readers will also find:

• Brand-new content on NoSQL database management, NewSQL, blockchain, and database-intensive applications, including data analytics, ERP, CRM, and SCM
• Updated and revised narrative material designed to offer a friendly introduction to database management
• Renewed coverage of cloud-based database management
• Extensive updates to incorporate the transition from rotating disk secondary storage to solid state drives

Companies today are moving rapidly to integrate generative AI into their products and services. But there's a great deal of hype (and misunderstanding) about the impact and promise of this technology. With this book, Chris Fregly, Antje Barth, and Shelbee Eigenbrode from AWS help CTOs, ML practitioners, application developers, business analysts, data engineers, and data scientists find practical ways to use this exciting new technology.

You'll learn the generative AI project life cycle including use case definition, model selection, model fine-tuning, retrieval-augmented generation, reinforcement learning from human feedback, and model quantization, optimization, and deployment. And you'll explore different types of models including large language models (LLMs) and multimodal models such as Stable Diffusion for generating images and Flamingo/IDEFICS for answering questions about images.

• Apply generative AI to your business use cases
• Determine which generative AI models are best suited to your task
• Perform prompt engineering and in-context learning
• Fine-tune generative AI models on your datasets with low-rank adaptation (LoRA)
• Align generative AI models to human values with reinforcement learning from human feedback (RLHF)
• Augment your model with retrieval-augmented generation (RAG)
• Explore libraries such as LangChain and ReAct to develop agents and actions
• Build generative AI applications with Amazon Bedrock

Git in Practice is a collection of 66 tested techniques that will optimize the way you and your team manage your development projects. The book begins with a brief reminder of the core version control concepts you need when using Git and moves on to the high-value features you may not have explored yet. Then, you'll dig into cookbook-style techniques like history visualization, advanced branching and rewriting history each presented in a problem-solution-discussion format. Finally you'll work out how to use Git to its full potential through configuration, team workflows, submodules and using GitHub pull requests effectively.

GitOps and Kubernetes introduces a radical idea—managing your infrastructure with the same Git pull requests you use to manage your codebase. In this in-depth tutorial, you’ll learn to operate infrastructures based on powerful-but-complex technologies such as Kubernetes with the same Git version control tools most developers use daily. With these GitOps techniques and best practices, you’ll accelerate application development without compromising on security, easily roll back infrastructure changes, and seamlessly introduce new team members to your automation process.

Learn multicloud deployment on Anthos directly from the Google development team! Anthos delivers a consistent management platform for deploying and operating Linux and Windows applications anywhere—multi-cloud, edge, on-prem, bare metal, or VMware.

In Google Anthos in Action you will learn:

• How Anthos reduces your dependencies and stack-bloat
• Running applications across multiple clouds and platforms
• Handling different workloads and data
• Adding automation to speed up code delivery
• Modernizing infrastructure with microservices and Service Mesh
• Policy management for enterprises
• Security and observability at scale

Google Anthos in Action demystifies Anthos with practical examples of Anthos at work and invaluable insights from the Google team that built it. You’ll learn how to use this modern, Kubernetes-based cloud platform to balance costs, automate security, and run your software literally anywhere. The book is full of Google-tested patterns that will boost efficiency across the development lifecycle. It’s an absolutely essential guide for anyone working with Anthos, or delivering software in a cloud-centric world.

In the newly updated Second Edition of Google Cloud Certified Associate Cloud Engineer Study Guide, expert engineer and tech educator Dan Sullivan delivers an essential handbook for anyone preparing for the challenging Associate Cloud Engineer exam offered by Google and for those seeking to upgrade their Google Cloud engineering skillset.

The book provides readers with coverage of every domain and competency tested by the Associate Cloud Engineer exam, including how to select the right Google compute service from the wide variety of choices, how to choose the best storage option for your services, and how to implement appropriate security controls and network functionality.

This guide also offers:

• A strong emphasis on transforming readers into competent, job-ready applicants, with a focus on building skills in high demand by contemporary employers
• Concrete test-taking strategies, techniques, and tips to help readers conquer exam anxiety
• Complimentary access to a comprehensive online learning environment, complete with practice tests

A must-have resource for practicing and aspiring Google Cloud engineers, Google Cloud Certified Associate Cloud Engineer Study Guide allows you to prepare for this challenging certification efficiently and completely.

Google Cloud Platform in Action teaches you to build and launch applications that scale, leveraging the many services on GCP to move faster than ever. You'll learn how to choose exactly the services that best suit your needs, and you'll be able to build applications that run on Google Cloud Platform and start more quickly, suffer fewer disasters, and require less maintenance.

Relationships in data often look far more like a web than an orderly set of rows and columns. Graph databases shine when it comes to revealing valuable insights within complex, interconnected data such as demographics, financial records, or computer networks. In

Graph Databases in Action, experts Dave Bechberger and Josh Perryman illuminate the design and implementation of graph databases in real-world applications. You'll learn how to choose the right database solutions for your tasks, and how to use your new knowledge to build agile, flexible, and high-performing graph-powered applications!

Build and use systems that safely automate software delivery from testing through release with this jargon-busting guide to continuous delivery pipelines.

In Grokking Continuous Delivery you will learn how to:

• Design effective CD pipelines for new and legacy projects
• Keep your software projects release-ready
• Maintain effective tests
• Scale CD across multiple applications
• Ensure pipelines give the right signals at the right time
• Use version control as the source of truth
• Safely automate deployments with metrics
• Describe CD in a way that makes sense to your colleagues

Grokking Continuous Delivery teaches you the design and purpose of continuous delivery systems that you can use with any language or stack. You’ll learn directly from your mentor Christie Wilson, Google engineer and co-creator of the Tekton CI/CD framework. Using crystal-clear, well-illustrated examples, Christie lays out the practical nuts and bolts of continuous delivery for developers and pipeline designers. In each chapter, you’ll uncover the proper approaches to solve the real-world challenges of setting up a CD pipeline. With this book as your roadmap, you’ll have a clear plan for bringing CD to your team without the need for costly trial-and-error experimentation.

A friendly, framework-agnostic tutorial that will help you grok how streaming systems work—and how to build your own!

In Grokking Streaming Systems you will learn how to:

• Implement and troubleshoot streaming systems
• Design streaming systems for complex functionalities
• Assess parallelization requirements
• Spot networking bottlenecks and resolve back pressure
• Group data for high-performance systems
• Handle delayed events in real-time systems

Grokking Streaming Systems is a simple guide to the complex concepts behind streaming systems. This friendly and framework-agnostic tutorial teaches you how to handle real-time events, and even design and build your own streaming job that’s a perfect fit for your needs. Each new idea is carefully explained with diagrams, clear examples, and fun dialogue between perplexed personalities!

Get a comprehensive understanding of gRPC fundamentals through real-world examples. With this practical guide, you’ll learn how this high-performance interprocess communication protocol is capable of connecting polyglot services in microservices architecture, while providing a rich framework for defining service contracts and data types.

Complete with hands-on examples written in Go, Java, Node, and Python, this book also covers the essential techniques and best practices to use gRPC in production systems. Authors Kasun Indrasiri and Danesh Kuruppu discuss the importance of gRPC in the context of microservices development.

Many people who use Git rely on "recipes"--copying and pasting commands they find on the internet without really understanding how Git actually works. But what do you do if you find yourself in a tight spot? You can't simply wing it. With this unique hands-on guide, you'll learn the ways of Git and have fun while doing it. Raju Gandhi peels back the layers to reveal the simple yet powerful engine that powers Git, so you'll understand not just the how but the why. You'll master branches, merges, commit messages, search, utilities, and more; learn best practices for collaborative work; and unlock the full potential of Git.

If you've read a Head First book, you know what to expect--a visually rich format designed for the way your brain works. If you haven't, you're in for a treat. With this book, you'll learn Git through a multisensory experience that engages your mind rather than a text-heavy approach that puts you to sleep.

Continuous integration and continuous delivery (CI/CD) are ubiquitous concepts in modern development. Azure Pipelines is one of the most popular services that you can utilize for CI/CD, and this book shows you how it works by taking you through the process of building and automating CI/CD systems using Azure Pipelines and YAML, simplifying integration with Azure resources and reducing human error.

You’ll begin by getting an overview of Azure Pipelines and why you should use it. Next, the book helps you get to grips with build and release pipelines, and then builds upon this by introducing the extensive power of YAML syntax, which you can use to implement and configure any task you can think of. As you advance, you’ll discover how to integrate Infrastructure as Code tools, such as Terraform, and perform code analysis with SonarQube. In the concluding chapters, you’ll delve into real-life scenarios and hands-on implementation tasks with Microsoft Azure services, AWS, and cross-mobile application with Flutter, Google Firebase, and more.

By the end of this book, you’ll be able to design and build CI/CD systems using Azure Pipelines with consummate ease, write code using YAML, and configure any task that comes to mind.

What you will learn

• Create multiple jobs, stages, and tasks on the Azure DevOps portal
• Use YAML syntax for Node.js, .NET, Docker, and SQL Server tasks
• Automate microservice applications on Azure Kubernetes Service (AKS) clusters
• Deploy Docker applications on AWS container services
• Use SonarQube and Jenkins for security and artifacts
• Implement CI/CD on Flutter-based mobile applications
• Utilize Azure Key Vault secrets in Azure Pipelines
• Build a Node.js application in Azure Container Instances

Who this book is for

This book is for DevOps engineers, release engineers, SREs, application developers, and sysadmins looking to manage CI/CD using Azure Pipelines with the help of real-world use cases. A clear understanding of cloud computing services on Azure and AWS, DevOps, and CI/CD concepts, along with knowledge of building and deploying web and mobile applications automatically on cloud is assumed.

DevSecOps is built on the idea that everyone is responsible for security, with the goal of safely distributing security decisions at speed and scale to those who hold the highest level of context. This practice of integrating security into every stage of the development process helps improve both the security and overall quality of the software. This book will help you get to grips with DevSecOps and show you how to implement it, starting with a brief introduction to DevOps, DevSecOps, and their underlying principles.

After understanding the principles, you'll dig deeper into different topics concerning application security and secure coding before learning about the secure development lifecycle and how to perform threat modeling properly. You’ll also explore a range of tools available for these tasks, as well as best practices for developing secure code and embedding security and policy into your application. Finally, you'll look at automation and infrastructure security with a focus on continuous security testing, infrastructure as code (IaC), protecting DevOps tools, and learning about the software supply chain.

By the end of this book, you’ll know how to apply application security, safe coding, and DevSecOps practices in your development pipeline to create robust security protocols.

What you will learn

• Find out how DevSecOps unifies security and DevOps, bridging a significant cybersecurity gap
• Discover how CI/CD pipelines can incorporate security checks for automatic vulnerability detection
• Understand why threat modeling is indispensable for early vulnerability identification and action
• Explore chaos engineering tests to monitor how systems perform in chaotic security scenarios
• Find out how SAST pre-checks code and how DAST finds live-app vulnerabilities during runtime
• Perform real-time monitoring via observability and its criticality for security management

Who this book is for

This book is for DevSecOps engineers and application security engineers. Developers, pentesters, and information security analysts will also find plenty of useful information in this book. Prior knowledge of the software development process and programming logic is beneficial, but not required.

Use Infrastructure as Code (IaC) to automate, test, and streamline infrastructure for business-critical systems.

In Infrastructure as Code, Patterns and Practices you will learn how to:

• Optimize infrastructure for modularity and isolate dependencies
• Test infrastructure configuration
• Mitigate, troubleshoot, and isolate failed infrastructure changes
• Collaborate across teams on infrastructure development
• Update infrastructure with minimal downtime using blue-green deployments
• Scale infrastructure systems supporting multiple business units
• Use patterns for provisioning tools, configuration management, and image building
• Deliver secure infrastructure configuration to production

Infrastructure as Code, Patterns and Practices teaches you to automate infrastructure by applying changes in a codified manner. You’ll learn how to create, test, and deploy infrastructure components in a way that’s easy to scale and share across an entire organization. The book is full of flexible automation techniques that work whether you’re managing your personal projects or making live network changes across a large enterprise.

A system administrator or infrastructure engineer will learn essential software development practices for managing IaC, while developers will benefit from in-depth coverage of assembling infrastructure as part of DevOps culture. While the patterns and techniques are tool agnostic, you’ll appreciate the easy-to-follow examples in Python and Terraform.

Solve difficult service-to-service communication challenges around security, observability, routing, and resilience with an Istio-based service mesh. Istio allows you to define these traffic policies as configuration and enforce them consistently without needing any service-code changes.

In Istio in Action you will learn:

• Why and when to use a service mesh
• Envoy’s role in Istio’s service mesh
• Allowing “North-South” traffic into a mesh
• Fine-grained traffic routing
• Make your services robust to network failures
• Gain observability over your system with telemetry “golden signals”
• How Istio makes your services secure by default
• Integrate cloud-native applications with legacy workloads such as in VMs

Reduce the operational complexity of your microservices with an Istio-powered service mesh! Istio in Action shows you how to implement this powerful new architecture and move your application-networking concerns to a dedicated infrastructure layer. Non-functional concerns stay separate from your application, so your code is easier to understand, maintain, and adapt regardless of programming language.

In this practical guide, you’ll go hands-on with the full-featured Istio service mesh to manage microservices communication. Helpful diagrams, example configuration, and examples make it easy to understand how to control routing, secure container applications, and monitor network traffic.