Daily Edition · Page 7

THE DAILY INDEX

Technology, AI, software, security, crypto and business

GENERAL

TLDR DevOps

TRADING A CLOUD IDENTITY FOR YOUR OWN: WORKLOAD ATTESTATION ON MANAGED COMPUTE

Netflix engineers developed a method to bridge AWS IAM roles with internal identities for Apache Spark workloads on Amazon EMR. The system maps each Data Project identity to a dedicated IAM role, allowing a control plane to sign metadata that an identity service verifies against a cloud proof of possession. This approach ensures that workloads running on managed compute obtain valid certificates from the internal PKI, called Metatron, without relying on the workload's own account of itself.

MAXIMIZING APACHE SPARK AVAILABILITY: MITIGATING COMPUTE STOCKOUTS WITH FLEXIBLE VMS AND OTHER BEST PRACTICES

Google's Managed Service for Apache Spark now supports flexible VMs, letting clusters rank multiple acceptable machine families and storage types so provisioning automatically falls back during regional capacity stockouts rather than failing. Google recommends pairing ranked configurations with AutoZone routing, autoscaling, and regional fallbacks for resilience.

TLDR IndexPage 7