Skip to main content
NewWe Tested AWS Emulator: It Blocks More Than Its Docs Say, and Less Than AWS Does

Learn DevOps by doing,
not just reading.

738+ articles, guides, and hands-on learning tools for engineers who prefer a terminal over a slide deck.

Join 1,500+ DevOps engineers learning every week

kubectl --watch
$
devops-daily --stats

// featured

Interactive Simulators

Browse all simulators

// categories

Popular Categories

Explore our content by topic

// exercises

Hands-On Exercises

Practice real-world DevOps scenarios with step-by-step guidance

View all exercises

// quizzes

Test Your Knowledge

Short interactive quizzes across Docker, Kubernetes, Terraform, networking, and more

// posts

Latest Posts

Stay up to date with the latest DevOps content

AWS

We Tested AWS Emulator: It Blocks More Than Its Docs Say, and Less Than AWS Does

AWS Emulator passed all 40 of our workflow checks and caught two IAM mistakes in our own test code. It also let a user with no policies assume an admin role, ignored permissions boundaries and session policies, and with the default JavaScript SDK settings, one SQS request went to real AWS. Here is what we measured on a throwaway droplet.

|22 min read
Linux

Disk Full but du Disagrees: Finding Deleted Files That Still Use Space

When df reports a full filesystem but du cannot find the bytes, an unlinked log held open by a process is often the missing space. Find the holder, release space safely, and prevent the next midnight disk-full incident.

|10 min read
Security

Node.js November 2026 Security Release: How We Tracked and Patched It

Node.js 22.23.5, 24.22.3 and 26.13.1 fix 16 CVEs, seven of them high severity in HTTP/2 and TLS. Here is what was fixed, who should upgrade first, the 15-minute watcher that told us the release was out, and the nvm, pm2 and systemd steps we used to move production in minutes.

|12 min read
Security

We Gave an AI Agent a read_only Neon Role. Here Is What It Blocked

A Neon read_only role blocked every INSERT, UPDATE, DELETE and schema change we sent, and the Neon MCP Server with a pinned role stopped every durable write. What still ran comes from standard Postgres defaults, and the real risk was a read that stalled a migration.

|15 min read
AWS

EC2 Can Now Tell You Where IMDSv1 Is Still Enabled

AWS added a configuration metric for IMDSv1 on November 5. Here is how to separate migration gaps from active usage and retire tokenless metadata access safely.

|7 min read
DevOps

Opsville: A Free Pixel-Art DevOps Town in Your Browser

Opsville is a free browser game. Walk a pixel-art town, fix eight DevOps districts with our simulators and quizzes, and see how we built it.

|7 min read

// guides

Latest Guides

Step-by-step tutorials to boost your DevOps skills

// tools

DevOps Tools and Calculators

Free, browser-only utilities. CIDR, JWT, base64, UUID, cron, K8s sizing, YAML. No sign-up, no server.

// about

DevOps Daily is a free, independent education platform for engineers who want to learn by running things, not by reading pitch decks. Kubernetes, Docker, Terraform, CI/CD, observability, and security, through hands-on simulators, quizzes, exercises, and a weekly newsletter.

Free
$0
forever
Tools
67
interactive
Subscribers
1,500+
engineers
Cadence
Weekly
no spam

// sponsors

Supported by

DevOps Daily stays free because these companies sponsor it.

  • Bitrise
  • Atomsized
  • DigitalOcean
  • DevDojo
  • SMTPfast
  • QuizAPI
Become a sponsor
devops-daily --subscribe
$ echo "Weekly DevOps digest. No spam. Unsubscribe anytime."
Weekly DevOps digest. No spam. Unsubscribe anytime.
$ subscribe --email
$

1,500+ engineers subscribed