Automation / DevOps / IaC

AWS has released the ListBillingViewSegments API to expose account billing hierarchy and relationship details over specified time periods. The service returns structural metadata such as management account status, billing group membership, and applied rate settings without including actual cost or usage figures. To handle mid-period changes in account positioning, the API segments the requested timeframe into distinct intervals with effective date ranges.

• New API exposes billing hierarchy and account roles without exposing cost data
• Segments time periods to reflect mid-period changes in billing relationships
• Supports direct invocation and integration with AI agents for automation
• Useful for auditing billing group structures and rate setting history

NSL replicates the Windows Subsystem for Linux 2 developer experience on native Linux hosts by using a single VM to manage multiple systemd-nspawn containers. It allows engineers to run distinct Linux distributions for development while sharing host files and ports seamlessly. The tool is designed to keep the host system free from conflicting development dependencies by isolating them within these containers.

• Achieves WSL2-like UX on Linux using systemd-nspawn inside a single VM.
• Supports multiple distinct distros for development without host contamination.
• Enables host file editing and port sharing across containerized instances.
• Helps maintain a stable host environment by isolating dev dependencies.
• Open source project available for developers seeking cleaner Linux workflows.

Openship is an open-source, self-hostable deployment platform that handles building, shipping, routing, and TLS termination for applications. It supports multiple control plane modes including desktop, SSH-connected servers, and cloud-hosted instances. Users can manage deployments via a desktop app, web dashboard, or CLI, pointing it directly at a repository to handle the rest.

• Integrates CI/CD, routing, and TLS termination into a single self-hosted control plane
• Supports multiple deployment modes: Solo (desktop), Server (SSH), and Cloud
• Manages application lifecycle via desktop app, web dashboard, or CLI interfaces
• Simplifies infrastructure by abstracting build and deploy steps behind a repo pointer

AWS has extended IAM outbound identity federation to support Amazon VPC endpoints for OIDC discovery APIs via AWS PrivateLink. This allows workloads to fetch OIDC discovery metadata and JSON Web Key Sets directly from within a VPC, keeping traffic off the public internet. The change supports the use of short-lived JWTs from AWS STS for authenticating with external services without exposing verification endpoints publicly.

• OIDC discovery and JWKS endpoints are now accessible via PrivateLink from inside the VPC.
• Eliminates the need for public internet egress to verify external service tokens.
• Reduces attack surface by keeping identity federation traffic within AWS network boundaries.
• Works with existing IAM outbound identity federation using short-lived JWTs.