AWS Glue vs S3 Tables: How Two Iceberg REST Catalogs Differ in Practice

·1 views

AWS offers two managed Apache Iceberg REST catalog implementations — AWS Glue and Amazon S3 Tables — both SigV4-signed and built to the same open specification. A developer ran a Python-based probe harness against both services on September 3, 2026, testing 25 of the 35 operations defined in the Iceberg REST catalog spec. Despite identical specification scores, the two catalogs diverge in 13 measurable behaviors, including different endpoints, SigV4 signing names, and warehouse identifiers. The investigation also highlighted a common pitfall: SigV4 requires the URL to be built and signed as one unit, since re-encoding query parameters separately causes a 403 signature mismatch. The full test harness and raw response evidence have been published on GitHub for independent review.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Research Finds n8n Agentic AI Workflows Vulnerable to Credential and Encryption Key Theft

Security researchers have identified a multi-stage attack chain in n8n, a popular agentic AI workflow automation platform, that can lead from an exposed API key to full encryption key compromise. At the core of the risk is the N8N_ENCRYPTION_KEY, which not only decrypts all stored credentials but also contributes to JWT signing secrets and session tokens, making it a single point of failure. Researchers found three weaknesses in how n8n derives these secrets, including a JWT signing key derivation that uses only half the characters of the encryption key, effectively halving its entropy. Additionally, 129 internet-accessible n8n instances were found using known weak encryption keys, and a reproduced exploit via CVE-2026-25053 demonstrated how a privileged API key could be escalated to access encrypted credential records. The findings highlight that as agentic AI systems gain access to more external services, weaknesses in their credential management layer carry increasingly severe consequences.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Monogram Ships AI Context Files Alongside Code So Clients Can Keep Building

Atlanta-based applied AI agency Monogram has changed what it delivers at the end of a project, now including a structured AI layer alongside the codebase itself. Every repository handed to clients contains an AGENTS.md file, an OpenSpec folder for requirements, skill files for domain-specific tasks, and a DESIGN.md capturing the design system. The goal is to ensure client teams and their AI coding tools can extend the system the same way Monogram's own engineers did, without losing context that previously died in chat sessions. Skills cover both widely-used frameworks and client-specific processes like support-call rubrics and escalation rules, all versioned in the same pull requests as the code. Monogram says this approach means features built by the client's team months later will still look and behave consistently with the original delivery.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Commit Your Code Conference in Dallas Shares Tech Career and Dev Insights

The Commit Your Code conference took place on September 3 and 4 in Dallas, with free virtual attendance and an option to donate to charity. Speaker Leon Noel highlighted that only 2% of people using easy-apply features actually land interviews, stressing the importance of networking and relationship-building. Developer Roxy Rodriguez-Becker shared how she built an app to track her son's medically required diet, which later gained a wider user base that helped her refine it. Her key advice was to ship projects publicly and use real user feedback for improvement. Full talk recordings are expected to be released on the Dallas Software Developers' YouTube channel.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Elanat Releases WebForms Core 2.1 with Broader Browser Support and Declarative UI

Elanat has launched WebForms Core (WFC) 2.1, a significant update to its domain-specific language built on the Commander-Executor concept for defining and controlling UI behavior without direct client-side DOM logic. The new version introduces higher-level declarative capabilities that blend declarative and imperative development approaches, enabling metadata-driven and structure-centric UI generation beyond traditional component models. Unlike version 2, which required ES2022, version 2.1 targets JavaScript ES2020, extending compatibility to older browsers including Chrome 106 on Android 6.0 and Safari 15 on iOS 15. Elanat reports the release followed over three months of compatibility testing between WebForms classes and the WebFormsJS library, achieving a quality assurance success rate above 99%.

0 comments Read more at DEV Community