fakeElonMusk

For a web app and API project built with React, Flask, Swagger, MongoDB and Redis, what is the best practice in terms of deployment across stage and production instances? I'm working on this for my client and it's not really in my wheelhouse.

Very low users (5-10/day) for the API and the admin site is used by one or two people. More of a proof of concept or prototype at this stage. Currently using AWS and deploying with a lot of python and shell scripts which push builds to Fury (debian) and then deploy w Spot elastic groups. Would love to simplify it since we don't need production grade infrastructure (yet). Let's assume the main requirement is to continue using AWS.

Any recommendations? Seems like AWS Beanstalk handles everything - is that the way to go? Other options? TIA.

I'm not a security expert but I always thought that HTTPS was secure and that if my code was calling an API (for example) with HTTPS/SSL Cert that it was encrypted end to end. Rephrase, I know it's encrypted but I'm aware that MITM or SSL Proxy methods can be used to expose that traffic by spoofing client/server keys.

So I assume that someone has to be on your network to use a tool like Charles Proxy. Is the combination of securing your network plus HTTPS "enough" security to keep web and app traffic safe? What are other aspects I'm missing? Would love to learn more if anyone is willing to share some good resources. TIA.

Let's say I use 1password or any other password manager. They will eventually get hacked or there will be a back door or some exploit. Right? All software has vulnerabilities, even the NSA has been hacked. So why is it more secure than me keeping passwords on paper? I would like to use 1password but I'm also ok with staying old school. Convince me!

Has anyone been? It seems like a different kind of tech conference but I have no idea if it's good or not.

https://toa.berlin/