In Season 5, Episode 4, Karl and Jon are joined by Ran Isenberg*, an AWS Serverless Hero. Together they discuss AWS Lambda cross-account access for DynamoDB Streams, Lambda durable functions, and a CI/CD security risk identified in AWS CodeBuild. They also touch on the potential AI bubble (including comments from Amazon’s CEO), upcoming Amazon job cuts, and—somehow—Jon manages to steer the conversation onto chocolate-covered Custard Creams.

03:51 - AWS Lambda cross-account access for DynamoDB streams

This feature allows Lambda functions in one AWS account to access DynamoDB streams in another account. The speakers discussed potential use cases but generally viewed it as a niche feature with limited applications. Concerns were raised about potential security risks and the breaking of contracts between services.

11:38 - AWS Lambda durable functions

This new feature allows Lambda functions to run for longer than the previous 15-minute limit. The speakers discussed how it simplifies certain workflows that previously required step functions or other workarounds. They noted that while useful, it may not be necessary to migrate existing solutions to this new feature.

22:42 - CICD security risk in AWS CodeBuild

A security flaw was discovered in AWS CodeBuild that could potentially allow attackers to gain access to repositories and pipelines. The speakers discussed the complexity of the exploit and emphasized the importance of monitoring CICD processes and supply chain security.

30:40 - Potential AI bubble

The speakers discussed Amazon CEO Andy Jassy's comments on the possibility of an AI bubble. They agreed that there are signs of a bubble, including circular investments and unsustainable business models. Concerns were raised about the long-term profitability of AI companies and the impact on other industries, such as gaming.

39:36 - Upcoming Amazon job cuts

The podcast discussed the impending job cuts at Amazon, affecting various departments including HR, sales, and Prime Video. The speakers expressed concern for affected employees and criticized the way the news was communicated, creating uncertainty for workers.

*More about our guest - ranthebuilder.cloud

Season 5, Episode 4: Streams, Serverless, and Supply Chain Security