OffNet Newsroom

Daily topic roundup

Automation / DevOps / IaC

Thursday, September 10, 2026 · 8 stories, curated & summarized — click any story for the source.

Share this roundup on LinkedIn Full edition
InfoQ generaldevops

IETF Standardizes HTTP QUERY Method for Safe Body Requests

The IETF has published RFC 10008, introducing the QUERY method as the first new standard HTTP verb since 2010. This new method allows developers to transmit complex query filters within the request body while preserving cacheable, safe, and idempotent semantics. It directly addresses the functional gaps between GET and POST for richer API interactions.

  • RFC 10008 adds QUERY as the first new standard HTTP verb since 2010.
  • Enables sending rich query filters in the body without losing safety guarantees.
  • Maintains cacheable, safe, and idempotent semantics unlike standard POST.
  • Resolves long-standing limitations in using GET for complex queries.
  • Designed to streamline API interactions and reduce payload complexity.
Read at source →
AWS What's New awsdatabase

AWS releases Nx Plugin 1.0 for scaffolding full-stack AWS apps

AWS has launched version 1.0 of the Nx Plugin, an open-source toolkit designed to scaffold full-stack applications on AWS using the Nx build system. The plugin provides generators that create specific application components, such as APIs, websites, and databases, alongside their corresponding infrastructure definitions. Supported frameworks include TypeScript and Python, with coverage for AI agents on Amazon Bedrock AgentCore and infrastructure defined via AWS CDK constructs.

  • Generates application code and AWS CDK infrastructure simultaneously to reduce manual setup.
  • Supports TypeScript and Python stacks with generators for APIs, sites, and databases.
  • Includes specific templates for Amazon Bedrock AgentCore and Model Context Protocol servers.
  • Aims to improve security and type-safety compared to AI-generated code alone.
CHECKLISTKey Nx Plugin CapabilitiesGenerates code and infrastructure simultaneouslySupports TypeScript and Python stacksIncludes Bedrock AgentCore templatesImproves security and type-safety
Read at source →
InfoQ generaldevops

Unikraft Stuffs 1M Sandboxes on One Server for AI Scale

Felipe Huici presents Unikraft's approach to extreme density for AI workloads by packing a million sandboxes onto a single server. The solution leverages Linux kernel optimizations and isolation primitives to achieve millisecond cold boots and stateful scale-to-zero. It maintains sub-10ms performance while integrating into Kubernetes with hardware-level security.

  • Unikraft enables extreme density by stuffing 1M sandboxes into one server for AI tasks.
  • Millisecond cold boots and stateful scale-to-zero are achieved via kernel optimizations.
  • Isolation primitives ensure hardware-level security within the Kubernetes environment.
  • Snapshotting tricks help maintain sub-10ms performance at massive scale.
Read at source →
AWS What's New awsdatabase

AWS Transform for .NET GA via CLI enables automated modernization

AWS has released the general availability of its managed .NET transformation service via a command-line interface. This one-line command allows engineers to trigger code upgrades, framework migrations, and performance optimizations either interactively or within automated CI/CD pipelines. The CLI tool integrates with existing AWS Transform experiences, supporting both ready-to-use and custom transformation logic for large-scale codebase updates.

  • Trigger .NET modernization tasks with a single CLI command for speed and simplicity.
  • Script transformations into CI/CD pipelines to automate codebase updates at scale.
  • Supports upgrading language versions, migrating frameworks, and optimizing performance.
  • Complements existing web, IDE, and agent-based AWS Transform workflows.
  • Enables use of AWS-managed or organization-specific custom transformation rules.
HOW IT WORKSAutomated .NET Modernization Pipeline1Trigger CLI command2Run framework migration3Optimize performance4Deploy via CI/CD
Read at source →
AWS What's New awsdatabase

AWS SSM expands unmanaged EC2 diagnosis to six new issue categories

AWS Systems Manager now identifies six additional causes for EC2 instances and hybrid nodes remaining unmanaged, including IAM permissions, SSM Agent version mismatches, instance status checks, OS configuration errors, Default Host Management Configuration issues, and hybrid activation problems. This update builds on existing network connectivity checks to provide specific, actionable root causes instead of unidentified errors. By resolving these blockers, administrators can ensure instances are properly managed for patching, command execution, and inventory collection.

  • Diagnoses now cover IAM, SSM Agent version, status checks, OS config, host management, and hybrid activation.
  • Reduces time spent troubleshooting why EC2 or hybrid nodes fail to register with Systems Manager.
  • Specific error codes replace vague 'unmanaged' states, enabling faster remediation.
  • Critical for maintaining patch compliance and enabling Session Manager access across the fleet.
CHECKLISTWhat matters hereDiagnoses now cover IAM, SSM Agent version, status checks, OS config…Reduces time spent troubleshooting why EC2 or hybrid nodes fail to…Specific error codes replace vague 'unmanaged' states, enabling…Critical for maintaining patch compliance and enabling Session…
Read at source →
InfoQ generaldevops

Panel: Platform Engineering Adapts to AI-Assisted Workflows and Autonomy Trade-offs

A panel of platform engineering experts discusses how teams must adapt their infrastructure to support AI-assisted development. They address the critical balance between enforcing standardization and preserving developer autonomy in an AI-driven environment. The discussion covers strategies for managing AI tooling, establishing security guardrails, and handling shifting engineering workflows.

  • Platform teams must redefine capabilities to support AI-assisted coding and debugging workflows.
  • Maintaining developer autonomy while enforcing necessary standardization is a key trade-off.
  • New strategies are needed to manage the proliferation of AI tools across the organization.
  • Security guardrails must evolve to address risks introduced by AI-generated code and prompts.
Read at source →
The Register general ↺ since 09-09

Microsoft sets Patch Tuesday record with 974 CVEs; Adobe updates critical

Microsoft has issued a record-breaking 974 security vulnerabilities in its latest Patch Tuesday release. Adobe also released significant security updates that require immediate attention from administrators. This deluge of patches highlights the critical need for rapid deployment cycles across Windows and Adobe environments.

  • Microsoft Patch Tuesday hit a new high with 974 CVEs released
  • Adobe updates are flagged for immediate administrative attention
  • Plan accelerated patching windows to handle the volume
  • Prioritize Adobe fixes alongside the Microsoft batch
Read at source →
AWS What's New awsdatabase ↺ since 09-09

Amazon API Gateway adds mutual TLS support for backend integrations

Amazon API Gateway REST APIs now support mutual TLS by allowing you to present an AWS Certificate Manager certificate to backend services during the TLS handshake. This replaces the previous limitation to self-signed certificates, enabling validation via trusted certificate authorities or AWS Private Certificate Authority. Updates and renewals propagate automatically without requiring redeployment or causing downtime.

  • Enable mTLS to verify backend identity using trusted CA certificates instead of self-signed ones.
  • Import existing PKI certs or use AWS Private Certificate Authority for management.
  • Certificate renewals propagate automatically with zero downtime or redeployment.
  • Enhances security posture for REST API integrations requiring strict backend authentication.
TRADE-OFFmTLS Certificate OptionsPrevious LimitationSelf-signed certificates onlyNo external CA validationWeaker identity verificationNew CapabilityTrusted CA certificates supportedAWS Private CA readyAutomatic zero-downtime renewalsvs
Read at source →
↑