Architecture Weekly #75

Architecture Weekly Issue #75. Articles, books, and playlists on architecture and related topics. Split by sections, highlighted with complexity: 🤟 means hardcore, 👷‍♂️ is technically applicable right away, 🍼 - is an introduction to the topic or an overview. Now in telegram as well.

WARNING 🇺🇦

It's already been a year since Russia's crazy, brutal and unjustified war against Ukraine. We condemn this war and want it to stop ASAP. We continue this newsletter so you can advance your skill and help the millions of Ukrainian people in any way possible. If you want to help directly, visit this fund.

Big thanks to Nikita, Anatoly, Oleksandr, Dima, Pavel B, Pavel, Robert, Roman, Iyri, Andrey, Lidia, Vladimir, August, Roman, Egor, Roman, Evgeniy, Nadia and Daria for supporting the newsletter. They receive early access to the articles, influence the content and participate in the closed group where we discuss the architecture problems. They also see my daily updates on all the things I am working on. Join them at Patreon or Boosty!

Highlights

Static stability with Availability Zones 👷‍♂️

Dynamic stability means that when something bad happens with a resource your service relies on, then another instance of this resource will be spawned as mitigation. Static stability is being ready and degrading while new resource is catching up. Many services in AWS are built with Static stability. Find out how it works with the example of EC2!

#aws #cloud #resilience

Ensuring the Successful Launch of Ads on Netflix 👷‍♂️

Netflix introduced a new tier, "Basic with ads", in November 2022. To ensure a smooth launch, they simulated user traffic patterns to uncover potential issues and validate ad algorithms. The team started with a small traffic percentage, eventually ramping up to 100%. This strategy also tested the system's resilience to sudden traffic spikes. The successful simulation method is being integrated into their CHAP experimentation platform for wider use.

#casestudy

Zero-day attack prevention via enhanced mobile app security 🍼

New post in my own blog! Zero-day vulnerabilities are very hard to deal with for mobile developers. Still, there are a handful of strategies to employ to minimize the damage. In this article, we’ll explore some enhanced mobile app security strategies that can aid in zero-day attack prevention. Armed with the insights below, you can protect your app and safeguard your end users' valuable data and privacy.

Zero-day attack prevention via enhanced mobile app security

Zero-day vulnerabilities are very hard to deal with for mobile developers. Still, there are handful strategies to employ to minimize the damage.

Vladimir Ivanov Dev BlogVladimir Ivanov

#security #mobile #zeroday

Follow-Up

What's wrong with OpenAPI? 🍼

OpenAPI is a way of generating the code based on the formal description or making the documentation based on the code. It is also handy to use OpenAPI for API First approach. However, OpenAPI is very verbose and not easily human-readable. In this note another way of describing HTTP API is suggested, check it out!

#api

From Technical Debt to Technical Health with HealthCheck 🍼

Technical debt is clear to understand by engineers, but it is an obscure obstacle to managers of all kinds. However, managers understand well the monetary aspects. Mikael Vesavuori provides an approach to bring the visibility of direct financial impact of tech debt by a HealthCheck approach. Find it here.

#quality

Building a Startup from Scratch: My Mistakes as CTO 👷‍♂️

I would like you to read not because there is a good system design here, but more of the opposite. The guy decided to go with the Microservices style backed up by Kubernetes, and guess what? Several months later the startup failed. I bet that's because they overcomplicated the design so much that they didn't have any resources to pivot. Don't make the same mistake: start small and frugal.

#casestudy

Security Certification Roadmap 🤟

Certifications do not guarantee any success in any of the IT fields, security included, but they help to grasp the foundational moments and build a solid picture. Here I am sharing the roadmap of certifications in 8 different areas of security.

#security

8 Steps in the Event Storming Process 👷‍♂️

Event Storming is a workshop format used to quickly find and understand the domain level events that drive a business process. It's a lightweight process modeling technique involving sticky notes and collaboration. It is highly flexible and can be adapted to various contexts, including setting a long-term vision. Find the 8 steps that would help the process smooth and efficient.

#ddd #eventstorming

The Three Types of Enterprise Architecture Framework 👷‍♂️

Enterpirse Architecture - in short - is how to simplify the development of the enterprise from the perspective of technology, business and organization. As there are similarities in business, so there are in the architecture frameworks. Find an article describing 3 types of Enterprise Architecture Frameworks.

#architecture #ea