InfoQ - DevOps

AI Root Cause Analysis Shifts from Model Reasoning to Context Engineering

Mark Silvester — Sat, 25 Jul 2026 09:00:00 GMT

Engineers are increasingly arguing that modern LLMs can already reason through root cause analysis once given correctly prepared context, shifting the hard problem to the pipelines that correlate telemetry. A Coroot experiment across eleven models offers early evidence for the claim.

By Mark Silvester

How Zalando Built an In-Process Client-Side Load Balancer for One Million Requests per Second

Renato Losio — Sat, 25 Jul 2026 06:43:00 GMT

The engineering team at Zalando recently described the design and implementation of an in-process, client-side load balancer for a high-throughput API handling around 1 million requests per second. The result was more predictable latency, a drop in infrastructure costs, and better visibility into where failures actually originate.

By Renato Losio

Airbus Makes Protection from Extraterritorial Law a Scored Criterion in Its Cloud Tender

Steef-Jan Wiggers — Fri, 24 Jul 2026 10:42:00 GMT

Airbus selected Scaleway as its sovereign cloud provider after a tender that scored protection against non-European extraterritorial legislation alongside technical capability. Airbus frames it as complementing multi-cloud, not exiting AWS. Practitioners note the pattern is spreading past hyperscalers to small US SaaS vendors, and that sovereignty claims still require verifiable controls.

By Steef-Jan Wiggers

Indirect Prompt Injection Exploits GitHub's AI Agent to Leak Private Repository Data

Sergio De Simone — Thu, 23 Jul 2026 20:00:00 GMT

GitLost is a prompt-injection exploit discovered by Noma Security that tricks GitHub's new Agentic Workflows into leaking private data. By embedding concealed instructions within public GitHub issues, attackers can circumvent security safeguards and induce AI agents to reveal confidential information in public comments.

By Sergio De Simone

AWS Billing Bug Shows Customers Trillion-Dollar Estimates While Its Own Cost Alarms Fail to Act

Steef-Jan Wiggers — Wed, 22 Jul 2026 10:19:00 GMT

A configuration change in AWS's bill computation system showed customers estimated bills in the billions and trillions of dollars for over 24 hours. AWS's own alarms detected the anomalies but failed to halt bill generation or page engineers; customer escalations alerted the company 4.5 hours later. Budget and cost anomaly alerts were disabled platform-wide during mitigation.

By Steef-Jan Wiggers

GKE Security Blueprint Joins Growing List of Cloud AI Frameworks

Matt Saunders — Wed, 22 Jul 2026 08:00:00 GMT

Google Cloud has published a new blueprint setting out how organisations should secure artificial intelligence workloads running on Google Kubernetes Engine, arguing that the shift from prototype to production has outpaced traditional security models. The document sets out a three layer approach covering infrastructure, model integrity and application security.

By Matt Saunders

GitLab Brings Carbon Awareness to CI/CD to Measure the Environmental Cost of Software Delivery

Craig Risi — Tue, 21 Jul 2026 12:00:00 GMT

GitLab has introduced a new approach to Green DevOps, demonstrating how software engineering teams can measure the carbon emissions generated by their CI/CD pipelines.

By Craig Risi

GitLab 19.2 Puts AI Agents to Work on the Security Backlog

Matt Saunders — Tue, 21 Jul 2026 08:00:00 GMT

GitLab has released version 19.2 of its DevSecOps platform, adding agentic automation aimed at the security and review work that has piled up as AI coding tools generate more code than developers can check by hand. The release, announced on 16 July 2026, brings four features out of beta or into public beta: Dependency Scanning Auto-Remediation, Security Review Flow, GitLab Duo CLI and Custom Flows

By Matt Saunders

Presentation: Platform Engineering for Everyone - Success Can’t Be Coded

Max Körbächer — Mon, 20 Jul 2026 11:50:00 GMT

Max Korbacher explains why successful internal development platforms cannot be built on tech alone. He discusses the pitfalls of infrastructure-first thinking, the importance of a clear product mindset, and how to measure real value using DevEx and SPACE metrics. Learn how to align your team, manage tech debt, and foster a thriving community to ensure lasting platform adoption.

By Max Körbächer

AWS Releases Loom, an Open-Source Reference Platform for Governing AI Agents at Enterprise Scale

Steef-Jan Wiggers — Mon, 20 Jul 2026 10:04:00 GMT

AWS released Loom, an open-source reference platform on AWS Labs for governing AI agents at scale. Built on Strands Agents and Bedrock AgentCore Runtime, it implements RFC 8693 token exchange for identity propagation through delegated actor chains, config-driven deployments without runtime code generation, and mandatory tagging. AWS positions it as an example, not a managed service.

By Steef-Jan Wiggers

Google's AlphaEvolve Reaches General Availability with Evolutionary Code Optimization as a Service

Steef-Jan Wiggers — Sun, 19 Jul 2026 10:16:00 GMT

Google's AlphaEvolve reached general availability on the Gemini Enterprise Agent Platform, turning the DeepMind research project into an evolutionary code optimization service. Evaluators run client-side so code never leaves the customer's infrastructure. Klarna doubled ML training throughput; practitioners note it only works where a measurable evaluation function exists.

By Steef-Jan Wiggers

AWS Introduces CloudFormation Express Mode for Faster Infrastructure Deployments

Renato Losio — Sun, 19 Jul 2026 05:59:00 GMT

AWS has recently introduced CloudFormation express mode, a deployment option that can reduce infrastructure deployment times by marking stack operations complete once resource configuration is applied, rather than waiting for full resource stabilization.

By Renato Losio

Cloud Native Infrastructure Emerges as the Foundation for Trustworthy Agentic AI

Craig Risi — Fri, 17 Jul 2026 12:00:00 GMT

A new technical analysis published by the Cloud Native Computing Foundation (CNCF) argues that the future of agentic AI will be built not on entirely new infrastructure, but on the mature cloud-native ecosystem that already powers modern distributed applications

By Craig Risi

How Uber Builds Zone-Failure-Resilient OpenSearch Clusters

Claudio Masolo — Fri, 17 Jul 2026 10:00:00 GMT

Uber explained how it keeps its OpenSearch deployments running during a zone outage. It does this by using OpenSearch's built-in shard allocation and its own isolation-group system, which relies on the Odin container orchestration platform. This way, it maintains both query and ingestion capabilities.

By Claudio Masolo

AWS Continuum to Enable Agentic Code Security for Enterprises

Gianmarco Nalin — Thu, 16 Jul 2026 19:00:00 GMT

Amazon Web Services has recently introduced AWS Continuum, a new integrated security platform to automate the discovery, enforcement, and remediation of security issues across codebases, dependencies, and applications. AWS Continuum launches with four agentic capabilities, aiming at the entire vulnerability lifecycle: penetration testing, code review, threat modelling, and code vulnerabilities.

By Gianmarco Nalin