founding engineer at @tembo, ex @cloudposse
Cincinnati, OH
Joined September 2011
- Tweets66
- Following79
- Followers50
- Likes77
everyone's getting hacked. now's the time to go back to the basics. enable MFA on everything you can and subscribe to least privilege principle in all things
you're only as a secure as your weakest link
DeepSeek goes free to use
1 week later there’s a coordinated attack against multiple platform companies
Coincidence?
An urgent notice from the Railway team
blog.railway.com/p/security-…
Dan Miller retweeted
Introducing Collabute Ship
You can use your @cursor_ai & @tembo agents at collabute.ai
@collabute agents will find a problem while you’re in the call, launch a Cursor or Tembo agent and get a ready PR before even you leave the call!
bring your own roles -- give it whatever permission you feel comfortable with. tembo can now swap between accounts on demand
Tembo now natively supports @AWS.
Give your cloud agents access to your AWS organization!
No static credentials required, define your own permissions and swap accounts on demand.
I finally fixed the AWS integration for tembo. This is really nice because now the agent can dynamically assume roles in different accounts on demand.
Combine this with a scheduled automation, and now we can send an agent to automatically analyze cost explorer, find orphaned resources, etc across the org.
It only took a few minutes to setup, but automations like these are life savers
building sandbox infra to replace local dev means expecting the user to break their sandbox.
they can and should be able to exhaust mem, corrupt the disk, or do whatever they want. it's your job to make it recoverable
it was only matter of time before local dev was beat by the cloud. hard to find a reason to do anything locally anymore
holy shit.. cloud coding agents are real
frontend? iterate in real time. the vm is right there
need nested virtualization? a database? your entire stack? it's linux. run whatever you want
it's basically local development, except it's all in the cloud
no one at tembo uses a local dev environment anymore
I’m on call this week and last night a cpu alert comes in while I’m watching a movie.
I handled the whole thing from my phone 🧵
We use incident.io for alerts, which we have configured for a few slack channels. When a message hits one of those channels, Tembo reacts automatically.
Tembo kicks off a custom skill we built with scoped access to AWS, our database, and Tailscale. It diagnoses the alerts, categorizes it, groups related or duplicate messages, and recommends the next steps.
So last night a CPU alert comes in. Tembo kicks off the investigation.
It immediately gives me a table of the customers running hot in our org. Turns out it was legit, heavy usage. So I Tembo to bump the ASG limit. It does, opens a PR, my automation pipelines apply it.
Alert resolved. Entirely from my phone