Today we bought @curtiseinsmann Master the code review course for our teams. Looking forward to seeing them improve their code reviews! The course looks genuinely promising.
For an API, website, or other system:
Authentication: identify *who* is trying to gain access
Authorization: identify *what* they're trying to gain access to — could be an action, or a resource
A hotel 🏨 is a decent analogy to understand Authentication and Authorization.
Authentication: when you check in, you give the clerk your ID, giving you access to the hotel.
Authorization: you receive a room key, which only gives you access to a specific room.
As a software engineer, the feeling of “how the heck am I going to solve this problem?” never goes away.
You will simply get used to it over time.
Confidence comes from:
“I’ve solved difficult problems before. I can do it again.”
@curtiseinsmann How much data is flowing in? If it’s a large volume I would use Kinesis to manage incoming hook with lambda handling any business rules and push to destination. As for outgoing there are so many options - depends on volume as well. There’s also AppSync which is a great tool.
❓ Question: I need to build a simple microservice, from scratch.
Goals:
- Receive a webhook from a third-party service as an HTTP POST
- Do some manipulation and filtering on the payload data
- Make HTTPS requests to other third-party services
How would you build this❓🤔
@curtiseinsmann If you're looking into utilizing Lambda, you should check out Serverless. They have great docs and it makes it super easy to deploy Lambda functions with endpoints you can hit from your client.
@akamahesh No, knowing the codebase isn’t enough. You must also understand the systems, architecture, and business environment for which the code will run in. ChatGPT won’t get there for quite some time, if ever.
Review your own code before opening up that Pull Request.
Not in an IDE — in an internet browser.
This subtle change gets you into "review mode." You'll read with more scrutiny. You'll likely find flaws you can correct, before opening up the PR.