What’s New for Developers: November 2023

We’re already nearing the holiday season and the end of the year but that doesn’t mean we’ve slowed down. This month we’re excited to share details on our new core compute regions and the most recent releases, including updates for Terraform, Edgegrid, and Property Manager.

Community Highlights

Top 3 Members of the Month

@scuba_steve is now at the top of our community leaderboard, followed by @luca.agostini and @David . Congrats to all three of you! We’re so glad to have you in our community.

The Cheers points used to populate our leaderboard are earned by engaging with the community, like visiting our forum, liking posts, and posting your own tips. We won’t ruin the fun by sharing how exactly the scores are calculated, but commenting on an existing topic or starting your own conversation allows others to react to your post, which can help your prestige in the community. :wink:

A note to those of you reading this without an account: New members who become active have a chance to earn the New User of the Month badge. So sign up if you’d like a chance to claim your own badge.

New User of the Month badge, which shows a blue figure with an orange-and-blue badge with a star

But that’s not all. There are many other cool badges that you can earn by participating. Read about them here.

Developer Releases: Tools and Resources

Terraform Provider 5.4 & Terraform CLI 1.10

We’ve released Terraform Provider 5.4, which comes with several features and enhancements for Appsec, Client lists, cloudlets, CPS, EdgeWorkers, IAM, and PAPI, and a few bug fixes for GTM, IAM, and PAPI.

The new 1.10.0 version of Terraform CLI introduces a handy new feature: now you can use the export-clientlist command to export data from akamai_clientlist_list and akamai_clientlist_activation resources. We’ve also added a new matches_always field that you can include when you’re working with edge redirector match rules in Cloudlets. For those using the Property Manager API (PAPI), this update supports the latest rule format, which is labeled as v2023-09-20. And, if you’ve been having trouble with variables and fields that span multiple lines, this release includes a fix for that. You can check out the details on GitHub through the provided links for both the CLI and the Terraform Provider.

:arrow_right: Read the Terraform Provider v5.4 release notes: Release v5.4.0 · akamai/terraform-provider-akamai · GitHub

:arrow_right: Read the Terraform CLI v1.10.0 release notes: Release v1.10.0 · akamai/cli-terraform · GitHub

Edgegrid Golang 7.4.0

The latest 7.4 version of the EdgeGrid Golang tool has a few updates. First, we’ve updated the AppSec GetExportConfigurationResponse struct to export rate policy burstWindow and condition fields. Second, we added a MatchesAlways field to Edge Redirector for Cloudlets. And lastly, it’s now simpler to manage user accounts because you don’t need to give a phone number anymore when you’re adding a new user or updating someone’s info.

:arrow_right: Read the release notes: Release Edgegrid v7.4.0 release · akamai/AkamaiOPEN-edgegrid-golang · GitHub

Deploy Akamai Cloud Computing Services in South America, Amsterdam, Miami, and Los Angeles

We have launched our first core compute area in South America, located in São Paulo, Brazil, as part of our ongoing global cloud development. Our new region in Amsterdam is ready to service the Netherlands as the second-largest internet exchange in the world. And last but not least, two new core compute regions, located in Los Angeles and Miami, are also now available for all customers.

:arrow_right: Read the South America announcement:

:arrow_right: Read the Miami & LA announcement:

:arrow_right: Read the Amsterdam announcement:

Property Manager: New Frozen Rule Format and Other Catalog Changes

A new frozen rule format is now available for Property Manager users. In addition, Origin IP ACL behavior is now in General Availability, accessible for Adaptive Media Delivery, Download Delivery, Object Delivery, Dynamic Site Accelerator, Ion Standard, and Ion Premier.

:arrow_right: Read the release notes: https://techdocs.akamai.com/property-mgr/changelog/nov-7-2023-new-frozen-rule-format-and-other-catalog-changes

TechDocs: View All Release Notes

A consolidated release notes page is now available on TechDocs. Now you can view all release notes for products on TechDocs in one place. You can filter by product or category, and get RSS feeds.

:arrow_right: Try it out: https://techdocs.akamai.com/release-notes/docs

Latest Articles & Videos

Save your GraphQL Infrastructure From Excessive, Abusive Loads

In this Dev Tip from Developer Champion @Alex_Leung , he highlights vulnerabilities in GraphQL APIs, particularly how inadequate attention to OWASP’s top 10 security risks can lead to over-fetching issues similar to RESTful APIs. It emphasizes the importance of monitoring API endpoints for abnormal traffic patterns, using tools like Akamai’s API Security 2, to prevent such exploitations.

:arrow_right: Read more:


Credential Probing via GraphQL Stuffed Queries

In his most recent post, @Alex_Leung discusses the security challenges associated with checking for existing user IDs, offering suggestions on how to protect yourself against malicious queries.

:arrow_right: Learn more: https://discuss.akamai.com/t/credential-probing-via-graphql-stuffed-queries-concerning-owasp-api-top-tens-unrestricted-access-to-sensitive-business-flows/

Brute-Force Attack Against Your Login APIs

Learn how to protect against brute-force attacks on your login APIs with @Alex_Leung ’s guide containing countermeasures to help protect yourself.

:arrow_right: Read more: https://discuss.akamai.com/t/brute-force-attack-against-your-login-apis-a-shell-script-illustrating-how-an-attacker-would-abuse-the-lack-of-maximum-failed-login-attempts/

Akamai EdgeWorkers | Using Enhanced Debug Headers

Enhanced debug headers provide standard debug information, a status message, wall time, CPU time, and memory consumption, and can also provide information about HTTP sub-requests. Check out our new video on how to get started debugging your EdgeWorkers code using Enhanced Debug Headers. Depending on your preference, you can watch a 5-minute video or read the documentation to learn more.

:arrow_right: Read the doc: https://techdocs.akamai.com/edgeworkers/docs/enable-enhanced-debug-headers

Get EdgeWorkers Error Reports with mPulse

We recently added the capability to capture EdgeWorkers errors with mPulse.

In a recent blog post, Hitoshi Kaneko walks you through the process of setting up the configurations on Akamai Control Center to make use of this feature.

:arrow_right: Read the post: https://www.akamai.com/blog/edge/get-edgeworkers-error-reports-with-mpulse

Mi-Seg: How to Protect Information Assets in the Zero Trust Era

Learning about microsegmentation just became much more fun. Dive into the world of Mi-Seg, the cyber ninja, in our new manga on protecting important assets.

:arrow_right: Read the manga: https://www.akamai.com/resources/white-paper/micro-segmentation-mi-seg-how-to-protect-your-information-assets-in-zero-trust-age

Cloud Portability: Building a Cloud-Native Architecture

Our new free e-book on cloud portability allows you to explore cloud-native development with microservices, containers, and other architecture decisions for development with open standard tools.

:arrow_right: Read it here: Cloud Portability: Building a Cloud-Native Architecture | eBook | Akamai

New Video Series: Build Applications with Infrastructure as Code

We recently launched a new video series in which @tnassi guides you through the process of building applications with Infrastructure as Code (IaC).

Watch the first video in the series to learn how to create a compute instance with Terraform.

:arrow_right: Watch the series: https://www.youtube.com/playlist?list=PLTnRtjQN5ieacRR28fbz07gHw1PQb5z1d

Well, this is our last recap blog for the year, but don’t worry. We’ll be back with more What’s New for Developers blogs in 2024!

What was your favorite piece of news for November? What about your favorite in all of 2023? Share your links and thoughts below.