API Security, AWS Lambda SnapStart, Akka 22.10, Apple Silicon, Technical Debt, Effective Retrospectives

In this issue, December 6, 2022 [View it in your browser.]( [ML Cost Optimization](#ML), [Backstage Vulnerability](#Backstage), [API Security](#API), [AWS Lambda SnapStart](#AWS), [Akka 22.10](#Akka), [SSR for Web Components](#SSR), [Apple Silicon](#Apple), [Uber Logging Costs](#Uber), [Technical Debt](#Technical), [Effective Retrospectives](#Effective) [QCon London 2023 (March 27-29): Tracks announced!]( Level-up on essential topics from senior software developers, including Modern Frontend Development and Architecture, Enhancing Developer Productivity and Experience, Remote and Hybrid Work, Debugging Production, Data Engineering Innovations, Architecture in 2025, [and more](. Attend in-person or online. Save your place by Dec 12 to save £360 off the full-price in-person ticket. [Register now](!  SPONSOR AD [Diffblue]( [Introducing the Next Generation of AI for Code]( Unit tests are essential for fast delivery of high-quality code. Diffblue Cover uses AI to write and maintain Java unit tests completely autonomously. Now new features help enterprises deliver code with even more speed, confidence and insight. [Learn more](. Sponsored by Diffblue [( [] [Managing an API as a Product with Deepa Goyal]( Not long ago, only programmers cared about APIs. Those days are behind us, and now companies need to manage their APIs as they would any other software they provide to customers. In this episode, Deepa Goyal discusses how to manage an API as a product, and how that impacts all members of the two development teams that interact with an API. (Podcast) [AI, ML & Data Engineering Latest Content]( TOP AI, ML & Data Engineering NEWS HEADLINES - [] [Open Source SkyPilot Targets Cloud Cost Optimization for ML and Data Science]( - [] [AWS Announces DataZone, a New Data Management Service to Govern Data]( - [] [Galactica: Large Language Model for Scientific Knowledge]( [] [Google's Code-as-Policies Lets Robots Write Their Own Code]( Researchers from Google's Robotics team have open-sourced Code-as-Policies (CaP), a robot control method that uses a large language model (LLM) to generate robot-control code that achieves a user-specified goal. CaP uses a hierarchical prompting technique for code generation that outperforms previous methods on the HumanEval code-generation benchmark. (News) SPONSOR AD [CockroachLabs]( [Top 3 reasons to migrate databases]( Your application may have outgrown your database. It happens. Migrating to a new database is not high on your holiday wish list. But it can be simpler than you've ever imagined. [Learn how](. Sponsored by Cockroach Labs [DevOps Latest Content]( TOP DevOps NEWS HEADLINES - [] [Critical Vulnerability in VM2 Sandbox Found Affecting Spotify Portal Platform Backstage]( - [] [AWS Announces Blue/Green Deployments for MySQL on Aurora and RDS]( - [] [Amazon Releases Time Sync as Public NTP Service]( [] [API Security: from Defense-in-Depth (DiD) to Zero Trust]( Nearly all companies have experienced security incidents but few have an API security policy that includes dedicated API testing and protection. A defense-in-depth approach that includes boundary defense, observability, and authentication is recommended. (Article) [] [With Observability, Cloud Deployments Don’t Have to Be Scary]( Martin Thwaites discusses how to have the confidence to deploy at will. This ability allows developers and the wider team to know when things go wrong, and remediate them quickly. (Presentation with transcript included) [Software Delivery Practices Evolve Fast, So Should Your Learning](. Attend QCon London software development conference (March 27-29, 2023) and uncover emerging software trends & practices to solve your complex engineering challenges, without the product pitches. SPONSOR AD [D2iQ]( [Webinar: Enterprise Kubernetes Done Right]( Be on the winning side of the smart cloud-native revolution! Let the experts at D2iQ show you components and steps required to supplement AWS EKS to create an enterprise-level, production-ready platform. [Save your seat](! Sponsored by D2iQ [Cloud Latest Content]( TOP Cloud NEWS HEADLINES - [] [AWS Announces the General Availability of Amazon Omics]( - [] [AWS Lambda SnapStart Accelerates Java Functions]( - [] [Azure SQL Database External REST Endpoints Integration Now in Public Preview]( - [] [AWS Introduces CloudFront Continuous Deployment for Blue-Green and Canary Strategies]( - [] [AWS Lambda Now Has Support for Node.js 18 Runtime]( [] [Using Serverless WebSockets to Enable Real-Time Messaging]( This article reviews some of the most common live-user experiences with examples, discusses event-driven architectures to support real-time updates, and introduces common technology choices. (Article) SPONSOR AD [Microsoft]( [[eBook] Code, Deploy, and Scale Java Your Way]( Learn how Microsoft Azure makes Java developers as efficient and productive as possible, letting them continue working the same way they do today — using the tools and software of their choice — while leveraging the power of managed services in the cloud. [Download now](. Sponsored by Microsoft [Development Latest Content]( TOP Development NEWS HEADLINES - [] [Windows Subsystem for Linux Now Generally Available in Microsoft Store]( [] [PHP 8 - Classes and Enums]( In this article, we will review new PHP 8 features related to classes, including enums, used to specify an enumerated list of possible values for a type; the new readonly modifier for a class property, which makes the property unmodifiable after its initialization; and constructor parameter promotion, useful to assign a constructor parameter value to an object property automatically. (Article) [] [Six Impossible Things]( Kevlin Henney takes a look at six specific impossible things that shape the limits of what people can develop, from integer representation to the minefield of task estimation and prioritization. (Presentation with transcript included) SPONSOR AD [LaunchDarkly]( [30 Feature Flagging Best Practices Mega Guide]( In this ebook, you’ll read about the nuances of feature flagging best practices, so you can avoid technical debt and other common challenges. Learn about short-term and permanent flags, release management, operational feature flags, experimentation, and more. [Download now](. Sponsored by LaunchDarkly [Java Latest Content]( TOP Java NEWS HEADLINES - [] [OmniFish on Providing Support for Jakarta EE 10 and GlassFish 7]( - [] [Akka 22.10 Introduces Projections over gRPC]( [] [Java News Roundup: Major Spring Releases, Resilience4j, Open Liberty, GlassFish, Kotlin 1.8-Beta]( This week's Java roundup for November 21st, 2022, features news from JDK 20, major, point and patch releases for Spring (namely Boot, Web Services, Security, Batch, Authorization Server, REST Docs, Framework, Modulith, GraphQL, Apache Kafka and RabbitMQ), Open Liberty 22.0.0.12, GlassFish 7.0-M10, GraalVM Native Build Tools 0.9.18, Resilience4j 2.0, Apache Tomcat 8.5.84 and Kotlin 1.8-Beta. (News) SPONSOR AD [ScyllaDB]( [7 Essentials When Selecting a NoSQL Database-as-a-Service]( With the move into the “Zettabyte era,” many are looking at DBaaS options that are deployed in a public cloud and fully managed by a DBaaS provider. This paper outlines 7 key considerations that help teams realize the many benefits a DBaaS has to offer — without falling into some of the common traps. [Download now](. Sponsored by ScyllaDB [Web Development Latest Content]( [] [Enhance, SSR for Web Components - Brian Leroux at QCon San Francisco 2022]( Brian Leroux, CTO at Begin, recently introduced Enhance, a new HTML framework, at QCon San Francisco. Enhance heavily lies on web standards and progressive enhancement for future-proof web applications. Enhance provides file-based routing, reusable Custom Elements, a customizable utility CSS system, and mapped API data routes that get deployed to isolated, single-purpose cloud functions. (News) [Mobile and IoT Latest Content]( [] [Apple Adds Core ML Support for Stable Diffusion on Apple Silicon]( Apple released a set of optimizations to Core ML to enable running the Stable Diffusion text-to-image model on Apple Silicon-powered devices running the latest iOS or macOS versions, respectively iOS 16.2 and macOS 13.1. (News) [Architecture & Design Latest Content]( TOP Architecture & Design NEWS HEADLINES - [] [Uber Reduces Logging Costs by 169x Using Compressed Log Processor (CLP)]( [] [What Does Technical Debt Tell You?]( Technical debt is a popular metaphor for communicating the long-term implications of architectural decisions and trade-offs to stakeholders, but there are limitations to its usefulness. Incorporating quality attribute requirements, or using a different metaphor such as deferred maintenance, can help improve decision making. (Article) [] [APIs at Scale: Creating Rich Interfaces that Stand the Test of Time]( Matthew Clark, Paul Caporn take a look at versioning, design patterns, handling different use-cases, supporting high-traffic moments, and the merits of different API types. (Presentation with transcript included) [Culture & Methods Latest Content]( TOP Culture & Methods NEWS HEADLINES - [] [Effective Retrospectives Require Skilled Facilitators]( [] [Enabling Effective Remote Working - Principles and Patterns from Team Topologies]( This article shares ideas, principles, and practices from Team Topologies (and related topics) to help organizations approach their structures' design and evolution to better support interactions in remote working. It also shares examples to showcase their impact when used to better approach organizational design, in general, and particularly to support remote working. (Article) [] [How SaaS Platforms Can Provide Career Opportunities to "Quiet Quitters"]( The pandemic-era work-at-home trend has caused some workers to decide they enjoyed it so much they refused to return to the office. Many would rather be fired, creating a sizable opportunity for SaaS developers. Work-from-home businesses require SaaS platforms that enable entrepreneurs to connect with their customers and handle their workflow. Here's some inspiration to get developers started. (Article) InfoQ Call for Contributors Write for InfoQ: Share knowledge, connect with the global software development community, and grow your career Are you an experienced senior software engineer or technical leader that is passionate about innovation, adoption of technologies, and the learning and sharing of knowledge with your peers? InfoQ content is written exclusively by software practitioners like yourself, with the goal of sharing inspiring content from real-world use cases, best practices used by innovator and early adopter companies, and news on emerging trends. [Join the InfoQ Writing Team](  SPONSORED CONTENT Latest Sponsored Resources [The Next Generation of AI for Code: Discover autonomous code writing with the new Diffblue Cover]( [Elevating Cloud Provider Kubernetes with D2iQ]( [An Architects Guide to NoSQL]( You have received this message because you are subscribed to the "Top Content Newsletter". To stop receiving weekly updates on trends, please click the following link: [Unsubscribe]( Forwarded newsletter? [Register to get your own weekly newsletter.]( - - - C4Media Inc. (InfoQ.com), 705-2267 Lake Shore Blvd. West, Toronto, Ontario, Canada, M8V 3X2